RunDllHostCallBack
Behavioral task
behavioral1
Sample
172de9ee0837206ce800bed7389170cd_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
172de9ee0837206ce800bed7389170cd_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
172de9ee0837206ce800bed7389170cd_JaffaCakes118
-
Size
102KB
-
MD5
172de9ee0837206ce800bed7389170cd
-
SHA1
eb50afcd0961bd2603c4e4ce3df5085c224af7dd
-
SHA256
2e13b67dd90492a9c049f57166ff4496fae934113beba76debb7366fe8c09061
-
SHA512
e5cfb18b0b8574e3b5c3d337c8de3f7f2405982942ed64d2d0e59fefc7313aec61bca8df672b8c16cd5492544f693f1f649c567a8199654135a74a09b1da5663
-
SSDEEP
1536:jISkHRlAKgbVIcvbugheAqWx7M3y9hRExwAetPrKLl:jqXQVIcvbdI3kZAetQl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 172de9ee0837206ce800bed7389170cd_JaffaCakes118
Files
-
172de9ee0837206ce800bed7389170cd_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE