Static task
static1
Behavioral task
behavioral1
Sample
220157f58ba3928c33e8035a20327b98_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
220157f58ba3928c33e8035a20327b98_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
220157f58ba3928c33e8035a20327b98_JaffaCakes118
-
Size
563KB
-
MD5
220157f58ba3928c33e8035a20327b98
-
SHA1
91df7925546aa352e251f6e8b3ba8ba0ca2e10d0
-
SHA256
c0acd1cece0e504a87042abdc7afe7124bcaed740fa004f6a66235938af807db
-
SHA512
bbd23b45bb02343662c1ed16d49533f8f1c3e3d1d6459d7efda7836662e38706a3ec6268e7e8c1d90fc0f9532ea763dc4df3127119a2261effdc97d6377c2cb7
-
SSDEEP
6144:OPG3u/8j0bLf31LhMXIFiaPmreDI0rUBvunT3gjHXIbg4r06xcJxVsJRglq0rZKm:HZjMLf11MmPQeRXEHYYS3gA0FJO1t3r2
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 220157f58ba3928c33e8035a20327b98_JaffaCakes118
Files
-
220157f58ba3928c33e8035a20327b98_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 518KB - Virtual size: 517KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ