Static task
static1
Behavioral task
behavioral1
Sample
30dbb9e3096473dcd3138c0dee54b746_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30dbb9e3096473dcd3138c0dee54b746_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
30dbb9e3096473dcd3138c0dee54b746_JaffaCakes118
-
Size
29KB
-
MD5
30dbb9e3096473dcd3138c0dee54b746
-
SHA1
3c58045802998e6a8a89342fd9e3c3e2057f4272
-
SHA256
389786eb65205fd911b0b20194c92a5da5d7c3de92b22f2d96da6d576bc1114a
-
SHA512
721b4537546ca8de034bfe6b2c675b8b4a7537c8b977dd16b4173cafb4fc6eb62994250e39122fa1ce9f35eb7d19b8b222bebc7f8f621e5b7d1ce62078a3c99b
-
SSDEEP
768:RsnZnhcgWcrzz2vkiXY+TinbHO7vnJtmI5h+C0NXElb+OQu1i5U:RWslcaVhuDO7j5h+rWinu1i5U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30dbb9e3096473dcd3138c0dee54b746_JaffaCakes118
Files
-
30dbb9e3096473dcd3138c0dee54b746_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
bq85h Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
898jz Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9vyhf5f Size: 344B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE