Overview
overview
10Static
static
3JaffaCakes...90.exe
windows7-x64
10JaffaCakes...90.exe
windows10-2004-x64
10JaffaCakes...90.exe
android-9-x86
JaffaCakes...90.exe
android-13-x64
JaffaCakes...90.exe
macos-10.15-amd64
JaffaCakes...90.exe
ubuntu-18.04-amd64
JaffaCakes...90.exe
debian-9-armhf
JaffaCakes...90.exe
debian-9-mips
JaffaCakes...90.exe
debian-9-mipsel
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_3ae9b6814b4e53dfb362d10b7af5a490.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3ae9b6814b4e53dfb362d10b7af5a490.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
JaffaCakes118_3ae9b6814b4e53dfb362d10b7af5a490.exe
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
JaffaCakes118_3ae9b6814b4e53dfb362d10b7af5a490.exe
Resource
android-33-x64-arm64-20240624-en
Behavioral task
behavioral5
Sample
JaffaCakes118_3ae9b6814b4e53dfb362d10b7af5a490.exe
Resource
macos-20241106-en
Behavioral task
behavioral6
Sample
JaffaCakes118_3ae9b6814b4e53dfb362d10b7af5a490.exe
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral7
Sample
JaffaCakes118_3ae9b6814b4e53dfb362d10b7af5a490.exe
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral8
Sample
JaffaCakes118_3ae9b6814b4e53dfb362d10b7af5a490.exe
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral9
Sample
JaffaCakes118_3ae9b6814b4e53dfb362d10b7af5a490.exe
Resource
debian9-mipsel-20240226-en
General
-
Target
JaffaCakes118_3ae9b6814b4e53dfb362d10b7af5a490
-
Size
499KB
-
MD5
3ae9b6814b4e53dfb362d10b7af5a490
-
SHA1
585d5c4e2c624b906137b9ea47664b2dea5de2cf
-
SHA256
4f94ecfe1d596098b3d38e61bffc84331d21ce404007b61f561640a86773f4ed
-
SHA512
b6002661ae17d5228c8b9cf88ddeb1080ecfef0fe99c2297a827699118cbc853600fad743617c123502900d99c8be0b02d2d61116a01f0ebf9a598c1353e951e
-
SSDEEP
6144:R/SuZXvFCbIE63YF3bUqlA7U/ysk5ypO/LIGNIb8BgkRqW2bRjtlL4DQ8yZoM2Yv:xSQKF3bUqC4BkqOsGNc8B3RqxP8QLp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_3ae9b6814b4e53dfb362d10b7af5a490
Files
-
JaffaCakes118_3ae9b6814b4e53dfb362d10b7af5a490.exe windows:5 windows x86 arch:x86
1871378a438f90ad98120b6ed9137564
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
VirtualFree
GetProcAddress
VirtualAlloc
LoadLibraryA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapAlloc
HeapReAlloc
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 460KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ