Static task
static1
Behavioral task
behavioral1
Sample
e0d3d861b3282503526175701c530cd9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0d3d861b3282503526175701c530cd9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0d3d861b3282503526175701c530cd9_JaffaCakes118
-
Size
1.2MB
-
MD5
e0d3d861b3282503526175701c530cd9
-
SHA1
cde9f58b435b75770288b478cd97d3002d17fe78
-
SHA256
d12c36f3d382ee449cc27675b4674d97b10fefe0e8098a27ca5036cd44427d7d
-
SHA512
df9b289a52689fd564fcf5915c4410d17707b5d9a1f2407874d2c8bac03cde65ce6cf72739cca4d6078a9539caff388beca2cd96559b9aa6c087286cec57f61f
-
SSDEEP
24576:3AHnh+eWsN3skA4RV1Hom2KXcmtcE8QH6alLptr5+kyjn4t:qh+ZkldoPKsacE8QH6Ut9yE
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0d3d861b3282503526175701c530cd9_JaffaCakes118
Files
-
e0d3d861b3282503526175701c530cd9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ