run
Static task
static1
Behavioral task
behavioral1
Sample
30e289fbf9c2970925b2b5cb93438755_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30e289fbf9c2970925b2b5cb93438755_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
30e289fbf9c2970925b2b5cb93438755_JaffaCakes118
-
Size
13.2MB
-
MD5
30e289fbf9c2970925b2b5cb93438755
-
SHA1
b9d0fa5513dbcdd325af92a1b4c92fcef9b29678
-
SHA256
e5e1b26139536d3cf7ac8885dfd7e7069ebc4c47befb5b7e3809a7573d973b04
-
SHA512
87ba14366000e715fc610f2c4c35dcdda2aac5244f67d27569737313e443956ce8d05c8413cafebacc4dcc568473f353a97127275ea9328686e01d7d169f91af
-
SSDEEP
6144:AVMBmjErtHkR9D785869XCdGAg5XiOBC3zjnA60:5AjErtHkR9DAYdGAJjnU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30e289fbf9c2970925b2b5cb93438755_JaffaCakes118
Files
-
30e289fbf9c2970925b2b5cb93438755_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 13.0MB - Virtual size: 13.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Pav Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE