RunDllHostCallBack
Behavioral task
behavioral1
Sample
08d88d4be90305cb01f9ec5ed4cd0e4a_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08d88d4be90305cb01f9ec5ed4cd0e4a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
08d88d4be90305cb01f9ec5ed4cd0e4a_JaffaCakes118
-
Size
94KB
-
MD5
08d88d4be90305cb01f9ec5ed4cd0e4a
-
SHA1
8ffdcddd0a8e6f1c59cdbaf87023e34e5247b15b
-
SHA256
0eb31081b7e4ddb53782ad9e828eb623804328d43be7b3536e98a378f14018a2
-
SHA512
3a279f2b6cb7a436d4344b42a1d09ad9cb54d021fec504db3938ae40092a01f2e0f2ee58513bbb93005cafe560dbfc876f266df7a5fe041324220126393db078
-
SSDEEP
1536:UTEmAfnmTdX7ZAnhvgMarWl9qxemdix63D6n2BJntMDJCmnyi:U4mumTdX7Knh0TxemdpDIcnKfnyi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08d88d4be90305cb01f9ec5ed4cd0e4a_JaffaCakes118
Files
-
08d88d4be90305cb01f9ec5ed4cd0e4a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE