Static task
static1
Behavioral task
behavioral1
Sample
2bac933bc9a1f180d99b8e6361a7ecd5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2bac933bc9a1f180d99b8e6361a7ecd5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2bac933bc9a1f180d99b8e6361a7ecd5_JaffaCakes118
-
Size
512KB
-
MD5
2bac933bc9a1f180d99b8e6361a7ecd5
-
SHA1
e63275204eaef801064c5d7dd79f2f9929bbd02a
-
SHA256
a874b4491d5f82b188c8e5151094d91b787b25636053f04c45b3606041c85f2b
-
SHA512
b33ca25d2cbdd9e898a00b37ec5ca5cc8a0c4ac12efeb2665f75455cc71166dcaf787dbeb240116dd828f11980a4cfe3853fe7817fc36cb5983f49448e997b23
-
SSDEEP
6144:1VY0W0sVVZ/dkq5BCoFaJ2i5Lf24C07N5OvSLTUF6pQxI6Upe2cBnTu19bcodj6Z:1gDhdkq5BCoC5LfWSLTUQpr2Zu19Qm5G
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bac933bc9a1f180d99b8e6361a7ecd5_JaffaCakes118
Files
-
2bac933bc9a1f180d99b8e6361a7ecd5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 399KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ