Overview
overview
10Static
static
3JaffaCakes...f8.exe
windows7-x64
10JaffaCakes...f8.exe
windows10-2004-x64
10JaffaCakes...f8.exe
android-9-x86
JaffaCakes...f8.exe
android-10-x64
JaffaCakes...f8.exe
android-11-x64
JaffaCakes...f8.exe
ubuntu-18.04-amd64
JaffaCakes...f8.exe
debian-9-armhf
JaffaCakes...f8.exe
debian-9-mips
JaffaCakes...f8.exe
debian-9-mipsel
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_3499252c1c101b70e8919d979c85def8.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3499252c1c101b70e8919d979c85def8.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
JaffaCakes118_3499252c1c101b70e8919d979c85def8.exe
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
JaffaCakes118_3499252c1c101b70e8919d979c85def8.exe
Resource
android-x64-20240910-en
Behavioral task
behavioral5
Sample
JaffaCakes118_3499252c1c101b70e8919d979c85def8.exe
Resource
android-x64-arm64-20240910-en
Behavioral task
behavioral6
Sample
JaffaCakes118_3499252c1c101b70e8919d979c85def8.exe
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral7
Sample
JaffaCakes118_3499252c1c101b70e8919d979c85def8.exe
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral8
Sample
JaffaCakes118_3499252c1c101b70e8919d979c85def8.exe
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral9
Sample
JaffaCakes118_3499252c1c101b70e8919d979c85def8.exe
Resource
debian9-mipsel-20240418-en
General
-
Target
JaffaCakes118_3499252c1c101b70e8919d979c85def8
-
Size
180KB
-
MD5
3499252c1c101b70e8919d979c85def8
-
SHA1
be592b22639c963569a6057f99021c13ffd86907
-
SHA256
adbc69392f2228409823e74c54b07934ecd893b482e7cec9d6ef126ea9e7046f
-
SHA512
7a70b47b788cf39b8a1549525733b70e486e76d8e7b6e1fce4ffbccaad8f24d5a377c92a006aec51e9da2142c84034ef039e3e937d73e1502d3d7be2831c4d4c
-
SSDEEP
3072:NjUgWSg0pLFZc2JXbMpCOZNfWcDXm4kn1mt7/r3yyDe3pVRF3siM7NtUGaEBOvQH:NjUqg0pLjcIXmtNfbX9t7/r3GaiYqY4M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_3499252c1c101b70e8919d979c85def8
Files
-
JaffaCakes118_3499252c1c101b70e8919d979c85def8.exe windows:4 windows x86 arch:x86
11c3ba22d58b54cda72ed20d02a371c2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
SetFirmwareEnvironmentVariableW
EnterCriticalSection
DeleteCriticalSection
GetProcAddress
LeaveCriticalSection
GetModuleHandleA
LoadLibraryA
SetStdHandle
EnumResourceTypesA
InitializeCriticalSection
LCMapStringW
LocalAlloc
GetShortPathNameA
GetLastError
GetSystemInfo
LocalFree
GetStringTypeA
gdiplus
GdipCloneImage
ole32
OleSave
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoTaskMemRealloc
wininet
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
winmm
timeGetTime
timeSetEvent
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ