GetHeroAudio
Static task
static1
Behavioral task
behavioral1
Sample
287e7391a1e7a82818808a4087fad56e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
287e7391a1e7a82818808a4087fad56e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
287e7391a1e7a82818808a4087fad56e_JaffaCakes118
-
Size
44KB
-
MD5
287e7391a1e7a82818808a4087fad56e
-
SHA1
381f7790ebba5fa83d7a15a92695945c9413e151
-
SHA256
156228a77e618c45b26e347b82b4101607e41187af4972743eee4866677aa745
-
SHA512
b897cde73a05cba6d259ec7d0cccc7edf7a7c1f1a499b879768611276f1793adb43db9bc75221cb9e99a455a32f7d11a3f27fb2a6a421968db343c797d567abb
-
SSDEEP
384:BY0+DeBCThuy2rjAuqySxm97MswmRhB4NXy2048JJmuyUsCZcNgQ:WIkThuyQjKxm95GX78JJmy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 287e7391a1e7a82818808a4087fad56e_JaffaCakes118
Files
-
287e7391a1e7a82818808a4087fad56e_JaffaCakes118.dll windows:4 windows x86 arch:x86
82210db21d157e8cd409b894c3ce15bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ord795
ord513
ord822
ord864
ord329
ord476
ord248
ord765
ord346
ord349
ord775
ord770
ord772
ord724
ord774
ord385
ord722
ord443
ord377
ord441
ord214
ord395
ord304
ord305
ord811
ord362
ord364
ord397
ord365
ord477
ord512
ord511
ord522
ord225
ord552
ord509
ord318
ord312
ord406
ord793
ord515
ord419
ord553
ord657
ord594
ord550
ord551
ord444
ord447
ord525
ord528
user32
ord670
winmm
ord52
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ