Static task
static1
Behavioral task
behavioral1
Sample
30cebda1a1faa3d03ae8efc148ff6ac5_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
30cebda1a1faa3d03ae8efc148ff6ac5_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
30cebda1a1faa3d03ae8efc148ff6ac5_JaffaCakes118
-
Size
47KB
-
MD5
30cebda1a1faa3d03ae8efc148ff6ac5
-
SHA1
6022c5d367ea6bd2740729e8af6205db5f37af70
-
SHA256
ba0be87034718767948984b9f23462f5b9233c4d140eaf812981cb863aa9b2c6
-
SHA512
3b2c584a105ec9e3eacabb182e915e1c8780f0b05ac10ee9496befe2827253a7f3e5036b03379cedb265ed4bc3a74ca87f2eb262e19e748881ab7be2bb1db7df
-
SSDEEP
48:OEPiqSNWm2y2uwfLZVOLfX3KncUU+fg4MGODTGCVsxrhIsar3f:nPiDomyBfLQfKcUU+fg4nmTkLu3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30cebda1a1faa3d03ae8efc148ff6ac5_JaffaCakes118
Files
-
30cebda1a1faa3d03ae8efc148ff6ac5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ