RunDllHostCallBack
Behavioral task
behavioral1
Sample
29d3875f4ed33d0b8926601af5820645_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29d3875f4ed33d0b8926601af5820645_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
29d3875f4ed33d0b8926601af5820645_JaffaCakes118
-
Size
95KB
-
MD5
29d3875f4ed33d0b8926601af5820645
-
SHA1
4ec6e1d46f710b3a4fa5562b6eb742b40b25e1ae
-
SHA256
b2ad55d33cde525b8ad21526c6a721155af0a30f2e542299840c221c2280200d
-
SHA512
590210caba18dab1cbc5f7abb3d770eee5d252e079d3d3aa60b4c2c31bc5a1ba0566863af57accce693ffd95c852b64adc30d56bec87d929503d03d98b9f003b
-
SSDEEP
1536:mkJvFEhpEWiQW8xs5V5zhb/Z449shz89vfu8mlJo3DneJ1LXRuKLmx3aZ:mkJNEhOW1W3HzhjZMMuDmreJFXRNmxqZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29d3875f4ed33d0b8926601af5820645_JaffaCakes118
Files
-
29d3875f4ed33d0b8926601af5820645_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE