Static task
static1
Behavioral task
behavioral1
Sample
15e9d7aa33ca60fe70c0cd04cc798b68_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
15e9d7aa33ca60fe70c0cd04cc798b68_JaffaCakes118
-
Size
664KB
-
MD5
15e9d7aa33ca60fe70c0cd04cc798b68
-
SHA1
c324907dcb2cc744d0d7a07b635d145aa59ca81c
-
SHA256
26073df85f5255fa2e63c23f0bd159e3286966cb7525294fba9de398f42a0004
-
SHA512
883bf08aad08057871da1a676718c64ab717bc4936cf30a0a9bedf7ea463543721a16eaa44d6892abb8a39a79981f04e269ae76b582214efefbcade2974882d7
-
SSDEEP
12288:/pqmC/2OGAtkCP4cejGSOpRK3C8MNTyaJdWE7P:/p4/2+ttPJLfpRK3C8MNeaJ37P
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15e9d7aa33ca60fe70c0cd04cc798b68_JaffaCakes118
Files
-
15e9d7aa33ca60fe70c0cd04cc798b68_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 495KB - Virtual size: 495KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE