Static task
static1
Behavioral task
behavioral1
Sample
9c2ebc85a716297c7041297e1aef676f_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
9c2ebc85a716297c7041297e1aef676f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9c2ebc85a716297c7041297e1aef676f_JaffaCakes118
-
Size
14.6MB
-
MD5
9c2ebc85a716297c7041297e1aef676f
-
SHA1
58f266a2ffe95d4e6cc1ea8a502f3473de50566c
-
SHA256
aa1b428798a44e7c65bd64cda41b75f3961e9598c188ad25e73ec1bfd869fbed
-
SHA512
09e4a4c80536caa2cf628c6d43155262f06b6bdc69ec43a1a4ecd149f012f100e9eba728c7ca1afbd7d49fc8d8d839733bcefc4be6e2eecc41d28c5dc85206e0
-
SSDEEP
393216:aFvv8iS6uKyq3J2kGJl+6N0brMb1TplDSC:EH8ijVZ2nlurMbVnuC
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c2ebc85a716297c7041297e1aef676f_JaffaCakes118
Files
-
9c2ebc85a716297c7041297e1aef676f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 403KB - Virtual size: 403KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 225KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ