Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_fae949f343130e9116c0b3a6cc744b45.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_fae949f343130e9116c0b3a6cc744b45.exe
Resource
win10v2004-20250207-en
General
-
Target
JaffaCakes118_fae949f343130e9116c0b3a6cc744b45
-
Size
250KB
-
MD5
fae949f343130e9116c0b3a6cc744b45
-
SHA1
52f77fc502b799fb6ec93f74cf3fca36cae24cd4
-
SHA256
d6f2c9d4726562c27080d3d8a276becc689f8453450e86707dd3a2f6a4cb8363
-
SHA512
a80d46291af48e2d41ee019a88a8cc69a88694b59c2deab81e064ee368c729d9eac4fdd86f8576a6fa5a6460763e1014462641a9b8f354586af861b7b7eca67d
-
SSDEEP
3072:b8uFqy/b9ztKLKwikmxoLU0/vTuOb7EXllXSLsCZCP6s8Z7OnZi2VCKude0W9wls:Y/GJztKmwiCyOKgBZCP6r7IpuYt9BMct
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_fae949f343130e9116c0b3a6cc744b45
Files
-
JaffaCakes118_fae949f343130e9116c0b3a6cc744b45.exe windows:4 windows x86 arch:x86
5facd15297699bdfd252e659a2e6a18a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
WaitForSingleObject
GetVersionExW
lstrlenW
lstrcpyW
lstrcpynW
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
Sleep
CreateMutexA
GetProcAddress
LoadLibraryA
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
inseng
DownloadFile
DllCanUnloadNow
sensapi
IsNetworkAlive
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 100KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 118KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ