Overview
overview
10Static
static
3JaffaCakes...a6.exe
windows7-x64
10JaffaCakes...a6.exe
windows10-2004-x64
10JaffaCakes...a6.exe
android-9-x86
JaffaCakes...a6.exe
android-10-x64
JaffaCakes...a6.exe
android-11-x64
JaffaCakes...a6.exe
macos-10.15-amd64
JaffaCakes...a6.exe
ubuntu-18.04-amd64
JaffaCakes...a6.exe
debian-9-armhf
JaffaCakes...a6.exe
debian-9-mips
JaffaCakes...a6.exe
debian-9-mipsel
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6.exe
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6.exe
Resource
android-x64-20240624-en
Behavioral task
behavioral5
Sample
JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6.exe
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral6
Sample
JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6.exe
Resource
macos-20241106-en
Behavioral task
behavioral7
Sample
JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6.exe
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral8
Sample
JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6.exe
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral9
Sample
JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6.exe
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral10
Sample
JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6.exe
Resource
debian9-mipsel-20240611-en
General
-
Target
JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6
-
Size
287KB
-
MD5
128002ba2034313b5ee8ae7b962b1ba6
-
SHA1
63d1abdd81c0630f2c8afd4be32e8dce2fcb6d73
-
SHA256
2b2c5f7bd2c76e12ae57782ec34ec76390923258f11860a800d53756eab6989e
-
SHA512
8309fb3854886f10377b5c5f11380cea1ad99ec00a2434eb99c218e6c3003ef117775b25e290fda4b636b243a0d2da1f9af80009bcc17a8c031551c12c838869
-
SSDEEP
6144:RuOsFiolw4pTBBZ0jkbno6/3MBftnpqcQC3HzSBrph+HavbfH:sZicfSeo6/qft43ckP+6jfH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6
Files
-
JaffaCakes118_128002ba2034313b5ee8ae7b962b1ba6.exe windows:4 windows x86 arch:x86
676d03668cc47d56045a78061fca2ed0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
GetCPInfo
VirtualAlloc
GetAtomNameA
GetOEMCP
HeapSize
WriteConsoleA
MultiByteToWideChar
RtlUnwind
HeapReAlloc
GetLocaleInfoA
GetTimeFormatA
IsValidCodePage
EnumResourceTypesA
GetDateFormatA
CreateToolhelp32Snapshot
SetStdHandle
GetACP
TlsSetValue
TlsGetValue
GetConsoleOutputCP
TlsAlloc
RaiseException
shell32
SHGetUnreadMailCountW
SHBrowseForFolderA
SHAppBarMessage
SHGetPathFromIDListA
SHGetFileInfoA
ShellExecuteExA
DragAcceptFiles
Shell_NotifyIconA
user32
MessageBoxA
DispatchMessageW
LoadStringA
CharNextA
GetDesktopWindow
DispatchMessageA
PeekMessageA
wsprintfA
rpcrt4
RpcStringFreeA
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ