GetHeroAudio
Static task
static1
Behavioral task
behavioral1
Sample
308f1e970c016a2401a5da7e8dda777c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
308f1e970c016a2401a5da7e8dda777c_JaffaCakes118.dll
Resource
win10v2004-20240708-en
General
-
Target
308f1e970c016a2401a5da7e8dda777c_JaffaCakes118
-
Size
72KB
-
MD5
308f1e970c016a2401a5da7e8dda777c
-
SHA1
ce83aa0cb58987c13629fbdeece8a8ccbedcf90b
-
SHA256
1722fb6f8a0043692363f1c504b16b1804f96d98230e2c8a7837f660d03d62a9
-
SHA512
47381318ebec980b45d7c622016eda239bb1a8cea63460a5d40e5cd6a51f9653da6bafb17b9b6278d5796f1a35063d9aada1eaaaf4b40c27e4b6d5a79f2b1f0e
-
SSDEEP
768:QVMOkUtxoJOlze+RTDt3OUAQTm2xlM4oxI6OwgfdtqiB9Fumy3aXGo2:Qxo4+yTm25oFVdfqc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 308f1e970c016a2401a5da7e8dda777c_JaffaCakes118
Files
-
308f1e970c016a2401a5da7e8dda777c_JaffaCakes118.dll windows:4 windows x86 arch:x86
f8fb3e5099bc943ef57bea4db2b1c44a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ord1442
ord1578
ord1575
ord1577
ord1579
ord959
ord308
ord865
ord275
ord1591
ord1407
ord590
ord630
ord722
ord1327
ord1009
ord947
ord945
ord730
ord727
ord1237
ord473
ord796
ord689
ord632
ord844
ord840
ord353
ord1422
ord538
ord847
ord849
ord543
ord1443
ord1440
ord1441
ord1332
ord1588
ord612
ord1556
ord725
ord593
ord880
ord428
ord429
ord1536
ord568
ord570
ord571
ord797
ord843
ord842
ord1483
ord888
ord876
ord885
ord1480
ord891
ord1391
ord963
ord452
ord437
ord666
user32
ord2494
sthmp3
ord1
ord2
ord3
mpegsys
ord41
ord51
mpgaudio
ord19
ord22
ord11
ord14
ord15
ord17
ord12
Exports
Exports
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ