Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_400e45f50e8d57646ff8c21e440c5185.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_400e45f50e8d57646ff8c21e440c5185.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_400e45f50e8d57646ff8c21e440c5185
-
Size
486KB
-
MD5
400e45f50e8d57646ff8c21e440c5185
-
SHA1
753145e48fa8c64e1f72111158390a17afa9baee
-
SHA256
56383f7efd78304c04061af21c25de8fab0bd5c51dd9cdf1500e8f2e7d21a933
-
SHA512
04bf4a4544cfeb1e24fe88298cfaa79b3d3ef9d995875a4ad8d55546dc80703d7ffc5fe911c929c9b461ece0b03b4287ba54c6afb623ceee3dd15e2c5b804190
-
SSDEEP
12288:FaM+GetPxms6d8cF9nPwjFBaeHWEchkF7NBTppDA:FqxmzdAFkuFT7Nho
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_400e45f50e8d57646ff8c21e440c5185
Files
-
JaffaCakes118_400e45f50e8d57646ff8c21e440c5185.exe windows:5 windows x86 arch:x86
ce81dd76974c5370ff68c36394dcdba3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetCurrentProcess
WaitForSingleObject
CreateThread
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
RaiseException
IsProcessorFeaturePresent
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapReAlloc
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
FlushFileBuffers
CreateFileW
CloseHandle
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 423KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ