RunDllHostCallBack
Behavioral task
behavioral1
Sample
2c7972ae7a5eff0a6325d65c5489c5d7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c7972ae7a5eff0a6325d65c5489c5d7_JaffaCakes118.dll
Resource
win10v2004-20240708-en
General
-
Target
2c7972ae7a5eff0a6325d65c5489c5d7_JaffaCakes118
-
Size
87KB
-
MD5
2c7972ae7a5eff0a6325d65c5489c5d7
-
SHA1
8041ded900bc326b5967fc9dc8af9f71ac51567d
-
SHA256
c7a5e5e63558e506b92e6c442ccb3acffcf50c44db03f70122b53af2816afd53
-
SHA512
5f3c97f0ce1c1244cf41065947c3bf6bc1c6a64ca92a41758778dc9881df512d49323f2805030c61e6f66091d2132a88ee655db06843ac961e0160cf678ad76a
-
SSDEEP
1536:niIK23G0LL0q9yiSxbYPBJOALhEQzujcAmArg9GWaPLDGnTYL/yvyWjow:nnt20nn9+hYJZdEQSIABfWaPLDMwij
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c7972ae7a5eff0a6325d65c5489c5d7_JaffaCakes118
Files
-
2c7972ae7a5eff0a6325d65c5489c5d7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE