RunDllHostCallBack
Behavioral task
behavioral1
Sample
30ef210664e0e9ffe81f4870f5dd2eb8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30ef210664e0e9ffe81f4870f5dd2eb8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
30ef210664e0e9ffe81f4870f5dd2eb8_JaffaCakes118
-
Size
71KB
-
MD5
30ef210664e0e9ffe81f4870f5dd2eb8
-
SHA1
c7a5d7bdedab0eb7f04a6573e34db34c404e980e
-
SHA256
c62f95237348d27a7efc6a30cdc7de2b5aa9cc200503ac9b7501826ce433e8a9
-
SHA512
39becf1b50f5531eb718c1055ec2fe563dc0de87472577f253523c2cba0bc64b4232dfae555129304b5dfa7d4d5a2afe18aa1d99fd7d708371e8ba54e0d6dd2d
-
SSDEEP
768:VhAR0QxZn6x2fa3YCYaEeZhJ6W8nc2jq0EmaSDRMHggozQK+YEXeTRw0freUp:VhAln6fjYuvec2iOYozvljKG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30ef210664e0e9ffe81f4870f5dd2eb8_JaffaCakes118
Files
-
30ef210664e0e9ffe81f4870f5dd2eb8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE