Static task
static1
Behavioral task
behavioral1
Sample
30d8f127daef6103f10ccf302d105b0d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30d8f127daef6103f10ccf302d105b0d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
30d8f127daef6103f10ccf302d105b0d_JaffaCakes118
-
Size
33KB
-
MD5
30d8f127daef6103f10ccf302d105b0d
-
SHA1
91df5c04fafa7ebc7ecd149fd0bcd1fe3fede760
-
SHA256
5df366c656d44df0050cc24a41bd96435de72c0f2e9ef363bf82d54a15e16bde
-
SHA512
770dbd33a7e6dbe7d697bae5445909ee4b520a85c682a73ea117a8d613a37fd2e9920ff7b201431723f5763c7793d4bdc3eb0501da6ae305f196e2a77e52cfd6
-
SSDEEP
768:re4TH/zy0W5defiInLF5a/nAC+JLyrUUk/5:64fzyD5aiIZ5a/ACCCFO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30d8f127daef6103f10ccf302d105b0d_JaffaCakes118
Files
-
30d8f127daef6103f10ccf302d105b0d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE