Behavioral task
behavioral1
Sample
14bfc7b9f4e65797a1994ef5e87834f5_JaffaCakes118.exe
Resource
win7-20240220-en
6 signatures
150 seconds
General
-
Target
14bfc7b9f4e65797a1994ef5e87834f5_JaffaCakes118
-
Size
189KB
-
MD5
14bfc7b9f4e65797a1994ef5e87834f5
-
SHA1
f3905466e926246c7b6b32759b1c0987374a7f34
-
SHA256
8c0daea23de93a372b22c9c4d72f069b96cd5a0ab40fa22894a7354e2a667dba
-
SHA512
bac57678e2c118c2a780693f97e0bf3b6cabb19e166b7b0d471bf0dc0fc493b139de7a3cda002e11b7053daeda512aff7dbde55a1f9dc03175417e4cd433b13d
-
SSDEEP
3072:CaTir6Dhrwh9IHAvTD+3ibEhOHFCpLlOG1CCojffsIC+P5gNb4IebDPZx:fTiIroI+TKQABVCRzfsIhP5IsPX
Score
10/10
Malware Config
Signatures
-
Trickbot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14bfc7b9f4e65797a1994ef5e87834f5_JaffaCakes118
Files
-
14bfc7b9f4e65797a1994ef5e87834f5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE