EnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
320d59a33295c54af23be0442fe6e3c0_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
320d59a33295c54af23be0442fe6e3c0_JaffaCakes118
-
Size
21KB
-
MD5
320d59a33295c54af23be0442fe6e3c0
-
SHA1
61324171c66f7a228327145567e18cd70da3aafa
-
SHA256
07df1e043a495298e0487113eec08fd99b24886b40c1da82387ac6cf6b752421
-
SHA512
74311d9725cdc1bdd289428acc750e7d78d2f52778b72e40faf1bc548f0752c9af89ab6fb7585026f72d3e12a302e8270bde6e5d87d7d2245f48a0f608af5ef6
-
SSDEEP
384:pOr5NKZ2hMi4PQS7fY6xHTult5e8EhzfhvjQ5iwInPSzdxOYY0Cfw:gr5o3QV6NulXUzZvjQ5jInadxIr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 320d59a33295c54af23be0442fe6e3c0_JaffaCakes118
Files
-
320d59a33295c54af23be0442fe6e3c0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ