GetHeroAudio
Static task
static1
Behavioral task
behavioral1
Sample
1a72fa99570de12fb74c5162a60ce9e5_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1a72fa99570de12fb74c5162a60ce9e5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1a72fa99570de12fb74c5162a60ce9e5_JaffaCakes118
-
Size
48KB
-
MD5
1a72fa99570de12fb74c5162a60ce9e5
-
SHA1
d2cdc9e590e7ca06c9eaf5ed4df1d53afffa6959
-
SHA256
d2d6a28df3cc29733456066f6b05066cd297a37ee818eca7dc18883de896f5fe
-
SHA512
eef518deb7c83d6a512e787fdbacdc2f2431e1ff3270408c31c8092d7ed5ed706d8be9cf3d1cfff35aa15defde2a4ca4d8bdb4bc993547ab08e1fa76f0544e00
-
SSDEEP
384:0UR2X54SamM0RTUGRV2z+zUdFpn7boRY4G5/HrycnPwEjKX2uZKrjRtqz/cZkSeZ:0O2gm9TUGD8d/nfQmHrv/js2Y60x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a72fa99570de12fb74c5162a60ce9e5_JaffaCakes118
Files
-
1a72fa99570de12fb74c5162a60ce9e5_JaffaCakes118.dll windows:4 windows x86 arch:x86
7944c8b54046f8a0d4ac80f3a1f6ab80
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ord415
ord419
ord553
ord344
ord849
ord409
ord758
ord205
ord160
ord827
ord864
ord858
ord747
ord395
ord477
ord512
ord329
ord476
ord248
ord765
ord346
ord349
ord775
ord770
ord772
ord724
ord774
ord385
ord722
ord443
ord377
ord441
ord214
ord307
ord304
ord305
ord811
ord362
ord364
ord397
ord365
ord511
ord795
ord513
ord822
ord522
ord225
ord552
ord509
ord318
ord312
ord406
ord793
ord515
ord657
ord594
ord550
ord551
ord444
ord447
ord525
ord528
user32
ord256
ord508
ord513
ord147
ord185
ord396
ord57
ord536
comdlg32
ord112
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ