Static task
static1
Behavioral task
behavioral1
Sample
30126c13e8f906faf089dba4f0dcd0f1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30126c13e8f906faf089dba4f0dcd0f1_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
30126c13e8f906faf089dba4f0dcd0f1_JaffaCakes118
-
Size
48KB
-
MD5
30126c13e8f906faf089dba4f0dcd0f1
-
SHA1
2244db7f49bb223536ee325fc1ecbaaa2f30625a
-
SHA256
f2983a4ae018cd9bee4b9a1ade069f43f1777e991121fb28a307f6c501ceec5a
-
SHA512
77c642679ae3f487314566a249cdb611c67364ef3eb2a23ef55017a7bc3b756a47f04101d774a6c8c8e211284d16b827d050a8632913f0b0c1c581f3f35e0d16
-
SSDEEP
768:DZTLoAiDCwYRchZUUWYzJQe8Mh6N8H/O28J9KpfmYiB4oWKfxA9O:twvmUtl+S0F28/MfW4jQA9O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30126c13e8f906faf089dba4f0dcd0f1_JaffaCakes118
Files
-
30126c13e8f906faf089dba4f0dcd0f1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE