EnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
2335eefb4e205222877c807a83861fea_JaffaCakes118.dll
Resource
win7-20240611-en
General
-
Target
2335eefb4e205222877c807a83861fea_JaffaCakes118
-
Size
524KB
-
MD5
2335eefb4e205222877c807a83861fea
-
SHA1
5bdd3bbea15ee525485a985585f82de076cf2382
-
SHA256
3c2cafcdd1655eb56a653a0b7374794083568b2597af8a52c1d15a4268d4b7c4
-
SHA512
4e4cfedd0e23d085bd4857994cf0fc6e9a03e2dd3716052a820051868ce26d438272c267bb65897ef5d674fc6add5ea43e6faa652d57677635668c56f3e830dc
-
SSDEEP
384:AdaFzgW66wPSuw5KYLx7NdY6VVBVx36M00+ensP4PO4m0bXhQWn/dKxzdxAEYYw6:A5Ha5J5dNBx36M2ensBa6Wn/dKVdx3x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2335eefb4e205222877c807a83861fea_JaffaCakes118
Files
-
2335eefb4e205222877c807a83861fea_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ