ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
d30bed941b026c0e00df38dcf7d023e6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d30bed941b026c0e00df38dcf7d023e6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d30bed941b026c0e00df38dcf7d023e6_JaffaCakes118
-
Size
105KB
-
MD5
d30bed941b026c0e00df38dcf7d023e6
-
SHA1
42c0ab242ff32669cb91209c9bcd57c8818b9cbf
-
SHA256
2978532f5cc14a9094b972d1c5f51c4de35240b644d749c293035e3d20d941b8
-
SHA512
0d0987e49b92dcc3f74ab10a36a34ef8ecc02c693eca9caef933ecda3f938883e90c3f1a8ddbd9ded491e30c20d511772ee83761507ddf089035dc5847e325ed
-
SSDEEP
1536:sA+QZw3D84SAqHdsJboytAfqJD+GvXDMYqxEZt9foIO2NnToIf9K9I0W:s06I6JbSqJSAXDnKETI2FTBf9WW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d30bed941b026c0e00df38dcf7d023e6_JaffaCakes118
Files
-
d30bed941b026c0e00df38dcf7d023e6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 71B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ