Behavioral task
behavioral1
Sample
44675771f7a2e2daeca2f0c5bd41c0c8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
44675771f7a2e2daeca2f0c5bd41c0c8_JaffaCakes118
-
Size
1002KB
-
MD5
44675771f7a2e2daeca2f0c5bd41c0c8
-
SHA1
ee253ade772e58d42b0a2ecad9470db3c9fab79d
-
SHA256
9ca5b1216cdffff2b831fb0f980211b61c294a24f1dda12de7f05a8ae45bc1ce
-
SHA512
3ec93acf97117001f3927ef767a4c393146461eaa164132877bb62916fa014d73ad7aa1ab1d4d32e5b8fe4b5907c97734a2e26a0c1d38ca15f4928f49a496bf0
-
SSDEEP
24576:PxqT31T6WE6I5jKqosOmkbMQmZhVmDRmgxsJefYCq1:S6WE6IN95kbMQmvUmg2JefYH
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44675771f7a2e2daeca2f0c5bd41c0c8_JaffaCakes118
Files
-
44675771f7a2e2daeca2f0c5bd41c0c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE