EnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
5d8939fdcad692a410b7956e46a52aa7_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
5d8939fdcad692a410b7956e46a52aa7_JaffaCakes118
-
Size
22KB
-
MD5
5d8939fdcad692a410b7956e46a52aa7
-
SHA1
92806b56312c8c0d3638c9b3d5218b569d9d235d
-
SHA256
0efe8316e7011de0169083015eae9bfa955e91c8a2eaa2abcb1ef61144a1fa2b
-
SHA512
1d371b7e2f70e421c20344ec2132a6fa589697aadb410d2365a9fa2b81d3c7716b8c789372e3c00ea8251adee8f270f07f9c1f844a786e43a2cf73b033bb92d9
-
SSDEEP
384:nPyZNjtU2mFBhuZPYNil09xSTSQtnj2KQR89Auuxzdvf7Hh0:PyZqfi+9xultnw89Abdvf7B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d8939fdcad692a410b7956e46a52aa7_JaffaCakes118
Files
-
5d8939fdcad692a410b7956e46a52aa7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ