a1488bad19c3484b234f0dda417ebd45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1488bad19c3484b234f0dda417ebd45_JaffaCakes118
Size

860KB
MD5

a1488bad19c3484b234f0dda417ebd45
SHA1

2b70bfa4663448b7b046b1fa7876b55ecd2e79eb
SHA256

dcfd63b0a86070f25c74fb6e7f639fa4e034033afb3af48470e2131f58866046
SHA512

d91ef0ca28088ac7e5543f7136abbf3bef212cf3d8e58e00e4440e19e7fef7a7e061ab683cb8b71519cbfa7923d2969bed5175430f53bbe05abc591b478aa92b
SSDEEP

12288:1/SLmg+a7icy7X5HhRdeBLb3VMx/9H9RG9/SqCDFuOXHfqtbeMfJinanZUO13H5w:18aa+z5rdeNLVsgFrtqMfJnZUe3Z/o

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
static1/unpack001/gs-auto-clicker-3-1-4.exe	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/gs-auto-clicker-3-1-4.exe

Files

a1488bad19c3484b234f0dda417ebd45_JaffaCakes118
.rar
gs-auto-clicker-3-1-4.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ