GetHeroAudio
Static task
static1
Behavioral task
behavioral1
Sample
f7414625a39d4468526b93bb446a6fb8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7414625a39d4468526b93bb446a6fb8_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f7414625a39d4468526b93bb446a6fb8_JaffaCakes118
-
Size
48KB
-
MD5
f7414625a39d4468526b93bb446a6fb8
-
SHA1
f029ab77affa3d2fd01ba269c38d499853d36840
-
SHA256
7cea2b8dbe8e5bea860c1e741efe989242a1c6ed5e8270d2233ef2de9bc511c5
-
SHA512
f5cda0e4e1894a9d462214f79edcc5b686435590b77e1b8d928c6c07cfaaa823b3ee9d49c7eda0da1a368b671bb34b2b6210646d2c34ca13beb6153afffe3d94
-
SSDEEP
384:rUR2X54SamM0RTUGRV2z+zUdFpn7boRY4G5/HrycnPwEjKb2uZK2jRtqz/cZkSeZ:rO2gm9TUGD8d/nfQmHrv/jk2YT0x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7414625a39d4468526b93bb446a6fb8_JaffaCakes118
Files
-
f7414625a39d4468526b93bb446a6fb8_JaffaCakes118.dll windows:4 windows x86 arch:x86
b6940a62c1b70f6f496e5e917a34e1b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ord415
ord419
ord553
ord344
ord849
ord409
ord758
ord205
ord160
ord827
ord864
ord858
ord747
ord395
ord477
ord512
ord329
ord476
ord248
ord765
ord346
ord349
ord775
ord770
ord772
ord724
ord774
ord385
ord722
ord443
ord377
ord441
ord214
ord307
ord304
ord305
ord811
ord362
ord364
ord397
ord365
ord511
ord795
ord513
ord822
ord522
ord225
ord552
ord509
ord318
ord312
ord406
ord793
ord515
ord657
ord594
ord550
ord551
ord444
ord447
ord525
ord528
user32
ord254
ord498
ord503
ord145
ord183
ord386
ord57
ord526
comdlg32
ord112
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ