Behavioral task
behavioral1
Sample
00c783ed3ec30f1b13db8e4f0008d1d9_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00c783ed3ec30f1b13db8e4f0008d1d9_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
00c783ed3ec30f1b13db8e4f0008d1d9_JaffaCakes118
-
Size
234KB
-
MD5
00c783ed3ec30f1b13db8e4f0008d1d9
-
SHA1
d7478f9f95731800b90ad595762772e57e9d7e85
-
SHA256
bf637ad8be7c1435022db400caf0d987281f4b517edcf47e54ac08af3044c725
-
SHA512
3d7bb4d4d69827a936c0c8e7eead0df0cea0e979caac9813df9e5f8702ff2a83de59e243be520518836e9eeea986e2fc2f815e51cbd22b0298857afa13c7ac04
-
SSDEEP
6144:Nk/SO+//39+BF/VmaGCvNeM+bmuZU9uzjk7dr5Ogfqw2QcKYdk3Mp:Nk/p+//9+L/VmE1eMRua9wj8drjqN3k
Malware Config
Signatures
-
Trickbot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00c783ed3ec30f1b13db8e4f0008d1d9_JaffaCakes118
Files
-
00c783ed3ec30f1b13db8e4f0008d1d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 233KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ