GetHeroAudio
Static task
static1
Behavioral task
behavioral1
Sample
3234d72649e15b6d13af1a5839490d21_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3234d72649e15b6d13af1a5839490d21_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3234d72649e15b6d13af1a5839490d21_JaffaCakes118
-
Size
44KB
-
MD5
3234d72649e15b6d13af1a5839490d21
-
SHA1
4e0e41f8ee173c33a2c6b3bf439a0fb7f6fedec5
-
SHA256
b016c1ba106276f20ad8b6a19c894b746109b53e1556bd09f06929e937f38894
-
SHA512
09d190b40fa7d267d7e583ab250d6298054c9b6b8f5c2824b907f62adcc86ca4a40df4eb204b00f37289284f4f8d075e8b239a5a60f75c81a7a2a4e401b9e20a
-
SSDEEP
384:blN/PfkBQ6cCTBs5ssvgM6SyRQs8ib7FWItLBQ7MNvyMuJ48CugrENyYn:blN/XITBosUQRv8ib5tzveJ48CBL6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3234d72649e15b6d13af1a5839490d21_JaffaCakes118
Files
-
3234d72649e15b6d13af1a5839490d21_JaffaCakes118.dll windows:4 windows x86 arch:x86
dfa24953c04b05ec449b9aeb8b78243b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ord795
ord513
ord822
ord864
ord329
ord476
ord248
ord765
ord346
ord349
ord775
ord770
ord772
ord724
ord774
ord385
ord722
ord443
ord377
ord441
ord214
ord395
ord304
ord305
ord811
ord362
ord364
ord397
ord365
ord477
ord512
ord511
ord522
ord225
ord552
ord509
ord318
ord312
ord406
ord793
ord515
ord419
ord553
ord657
ord594
ord550
ord551
ord444
ord447
ord525
ord528
user32
ord671
winmm
ord52
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ