Static task
static1
Behavioral task
behavioral1
Sample
33543f020ddab0ee45df0b881b785847_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33543f020ddab0ee45df0b881b785847_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33543f020ddab0ee45df0b881b785847_JaffaCakes118
-
Size
578KB
-
MD5
33543f020ddab0ee45df0b881b785847
-
SHA1
291b414fbc3139d3da9d6a2ca906908dc9721798
-
SHA256
d34070cdff3bcbc92a1a1f24f39f9d683293626bfb0252a2a4f45354e0a6ee5b
-
SHA512
7a428d5c3b68a3c1b70ae265d5c1598258b86a03f2e20710011f8f8734976bcfc78f7279447f60a60c31d0b0bb82febf404a477865fd9e02489eee206fc8391f
-
SSDEEP
6144:5pqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcYYnC/:5pqiC/2OGAtkCP4cejGSOpRKPCXd3Hl
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33543f020ddab0ee45df0b881b785847_JaffaCakes118
Files
-
33543f020ddab0ee45df0b881b785847_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 495KB - Virtual size: 495KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE