Static task
static1
Behavioral task
behavioral1
Sample
f9b22b7aeb8d2704b53b12feca3bd7bb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9b22b7aeb8d2704b53b12feca3bd7bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9b22b7aeb8d2704b53b12feca3bd7bb_JaffaCakes118
-
Size
780KB
-
MD5
f9b22b7aeb8d2704b53b12feca3bd7bb
-
SHA1
62c168969ab821404695f6e260c4a028d0e7b84e
-
SHA256
d5bb42cec0f56c78c0f416929e4b07403ba0e1f96d1ec7d546681c1f3de5cfdb
-
SHA512
5addd6f76abc7598a53067777aeda325460bbb368643fd6f647e719c1423b250d6eaf7928bde8a6d415b59d6676057b1546fab8b3793ea189ab6fc4aa9664bd8
-
SSDEEP
6144:2/8JeJfEuGs8k/bUlgqjpJDHCq17WSTLp980sbpy3KR/ie5bBb2Y+9QAn8f:3JeJfEuGstgg/kjp98zHpie5twQA8
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9b22b7aeb8d2704b53b12feca3bd7bb_JaffaCakes118
Files
-
f9b22b7aeb8d2704b53b12feca3bd7bb_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.unpack Size: 780KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE