Static task
static1
Behavioral task
behavioral1
Sample
30ebd0c002f36d9a395cdb4dddc8f462_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30ebd0c002f36d9a395cdb4dddc8f462_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
30ebd0c002f36d9a395cdb4dddc8f462_JaffaCakes118
-
Size
48KB
-
MD5
30ebd0c002f36d9a395cdb4dddc8f462
-
SHA1
e5bcf441b6f5092d9c0a843420390fe0632430df
-
SHA256
61bc494141b5ce467e56d4730d839a099ca05214cfb119acb1497b28f75d661d
-
SHA512
689313a9bbc1147ae8974dd7dc5c93447dc2aef93c8d536ee2f72a7ec6036241118af6085bd6b0267473f4ceb50baa1a14e25ecc8964e93a06c3c69ffbfd6acb
-
SSDEEP
768:u8pcCkjWpCEDYpWpKSCBKXpOqLxcpagkDUrVU/IripNhW/RweCfiWW9dQD247:dpaWpCEDYp8CAXckfyVd4/Yh4D2C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30ebd0c002f36d9a395cdb4dddc8f462_JaffaCakes118
Files
-
30ebd0c002f36d9a395cdb4dddc8f462_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 48KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE