Static task
static1
Behavioral task
behavioral1
Sample
dbb411b31c2f2beb3cf20e5f428c6100_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
dbb411b31c2f2beb3cf20e5f428c6100_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
dbb411b31c2f2beb3cf20e5f428c6100_JaffaCakes118
-
Size
1.2MB
-
MD5
dbb411b31c2f2beb3cf20e5f428c6100
-
SHA1
4d61b3d4bf11f05b05f55f6014056f6c6b28dab1
-
SHA256
bb64e688ed77464721aed2f6ccf8a730d5cdd5ae6bb2884e9d3ee46ae41fcdad
-
SHA512
d5120df6db4dce07b37c15c405e156507bf8b08e3013f939741d1a6af63b7c51cc6923981b1973961b3a2e86dc736565cfdeb33bb27654da717682bba8c46f2a
-
SSDEEP
24576:BRmJkcoQricOIQxiZY1WN9G4aEMuoKqWlOAXzxaA:uJZoQrbTFZY1WN9G4aEMbgOADkA
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbb411b31c2f2beb3cf20e5f428c6100_JaffaCakes118
Files
-
dbb411b31c2f2beb3cf20e5f428c6100_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 514KB - Virtual size: 513KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 376KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ