Static task
static1
Behavioral task
behavioral1
Sample
enigma-tdftrn.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
enigma-tdftrn.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
www.mogelpower.de.url
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
www.mogelpower.de.url
Resource
win10v2004-20240802-en
General
-
Target
a1c3341a31af40f5fd01eeee51cb7d36_JaffaCakes118
-
Size
117KB
-
MD5
a1c3341a31af40f5fd01eeee51cb7d36
-
SHA1
e9a7da9776bd33697905105452639b269b5b4c52
-
SHA256
5047d6c3d984fd2e1c9ccd014aef7295d6845477120ad9ebb0f5656c358058ab
-
SHA512
41515d8bb62de4b030629126f86b2a14d00262f287917526168c668dd8d9635c58fa91173cecb6de66d11e7c8798edb8e778a1430a3d869c504289574c78ef6e
-
SSDEEP
3072:lq/RAwDqj3kHLt0bGadREkQE7MpHLvvDs9++hWnujfKy:lUrWjYGCadRbVMpTvWQy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/enigma-tdftrn.exe
Files
-
a1c3341a31af40f5fd01eeee51cb7d36_JaffaCakes118.zip
-
enigma-tdftrn.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 6.3MB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
-
enigma-tdftrn.nfo
-
www.mogelpower.de.url