Static task
static1
Behavioral task
behavioral1
Sample
bbdfbf1eed93ca145975e3fce760254a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bbdfbf1eed93ca145975e3fce760254a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbdfbf1eed93ca145975e3fce760254a_JaffaCakes118
-
Size
515KB
-
MD5
bbdfbf1eed93ca145975e3fce760254a
-
SHA1
1da2ce2a558ef0f0255fc7d2fd157dce66f73b9b
-
SHA256
d57219522639defc6605c7bf36520b5697ea61eecb8d92efc8e8ad8615418e2d
-
SHA512
46174843eddb55c5ab02a2b1fa11f6e99b817ee4876bbc8abd4ace4f88de4555f02e66cc2de552350d0ec0744c74e4080ef8474c48883f598292ab077f4a6da5
-
SSDEEP
6144:qN+/ESzMyLcw1YY6Q7hOJunSp/tai78WwQ2MGQuewKqg2xysRkkP1KRKbCXbY+72:qN+sCMDaUJv/t1/9+AqosRkm3Obug2
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbdfbf1eed93ca145975e3fce760254a_JaffaCakes118
Files
-
bbdfbf1eed93ca145975e3fce760254a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.at4re0 Size: - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.at4re1 Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.at4re2 Size: 277KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE