Static task
static1
Behavioral task
behavioral1
Sample
bfd93bdf4c19875a4e5ab234b6026203_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bfd93bdf4c19875a4e5ab234b6026203_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfd93bdf4c19875a4e5ab234b6026203_JaffaCakes118
-
Size
1.2MB
-
MD5
bfd93bdf4c19875a4e5ab234b6026203
-
SHA1
e0e14d55f84ab3a08b517816b4178b26b73f6564
-
SHA256
d2df2e8270b09e45aa99f986124ab37b1928e3455ea67271504beb40bf9088cd
-
SHA512
c1cb47facdd81124de7f6b7e4e28d0db2f78f1322bb327d8eeac69d84073a2ae1d6fc65b7c013cb8eb9099e60635b3785e34475260f814cd3e8164c809d87bb1
-
SSDEEP
24576:9po/2+ttPJLfpRK3C6TG8PazEv8W8CcQy2U1YfpIcm7:Ue2PJLa3C6T7PQEEZKyvCBlk
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfd93bdf4c19875a4e5ab234b6026203_JaffaCakes118
Files
-
bfd93bdf4c19875a4e5ab234b6026203_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 495KB - Virtual size: 495KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ