Behavioral task
behavioral1
Sample
009fc6f2e034451509e775bf10cad05c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
009fc6f2e034451509e775bf10cad05c_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Errors
General
-
Target
009fc6f2e034451509e775bf10cad05c_JaffaCakes118
-
Size
121KB
-
MD5
009fc6f2e034451509e775bf10cad05c
-
SHA1
5da8b58466e5d44138e6cdd73b96028b234027b8
-
SHA256
d40f227c8284a03a6b782bb66e37316d070484e6906d4545aa4eabdb5e177d63
-
SHA512
f90621f939a1367659370031327f48d7e8a20107eb9ba888ef65db49a4e72e9c865cb3a60579ac37f2ae6d00cd1854280fb84f9c84e087c5d787917eb0a45f2b
-
SSDEEP
3072:XsK2vc2jYVCf0d2vqWJcYFfJ81fziTd/:XsKqc2jGC8+fJcfzg
Malware Config
Signatures
-
Trickbot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 009fc6f2e034451509e775bf10cad05c_JaffaCakes118
Files
-
009fc6f2e034451509e775bf10cad05c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ