EnAHookAWindow
Static task
static1
Behavioral task
behavioral1
Sample
f295784e34bc4345ce692968cf85e308_JaffaCakes118.dll
Resource
win7-20240221-en
General
-
Target
f295784e34bc4345ce692968cf85e308_JaffaCakes118
-
Size
526KB
-
MD5
f295784e34bc4345ce692968cf85e308
-
SHA1
590650c0278bce55f4a93e3a6c715addcb2eb4e5
-
SHA256
47c44ba5988d8216e45e62cbf3c391aa47419759ed14ac5d113e213f2aea03ee
-
SHA512
9697e13e17b4335f1bc7dca3ee79af850785446ebeec89fa1143ebac43b8ce4bb132a436572724f5167f4659db4bcd279d91292e582b3dac82a7c5f799e32a78
-
SSDEEP
384:W6DqVNjtU2+LA+dpfaXe6JS1tMcP3gIKR8tIlHgMIRZkzLzQktDREhz7:WDV0pbX6s1tDzKGylHDwZkLzQk5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f295784e34bc4345ce692968cf85e308_JaffaCakes118
Files
-
f295784e34bc4345ce692968cf85e308_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 10KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ