RunDllHostCallBack
Static task
static1
Behavioral task
behavioral1
Sample
42cdbae7b77bdcd4dbfe2d516e4fa23c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42cdbae7b77bdcd4dbfe2d516e4fa23c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
42cdbae7b77bdcd4dbfe2d516e4fa23c_JaffaCakes118
-
Size
1.2MB
-
MD5
42cdbae7b77bdcd4dbfe2d516e4fa23c
-
SHA1
ddcf88ac9bbf9d471d7b7be8539e4bf1d2d40897
-
SHA256
d050edf63b79cdcf8379ece3359b063639f509bb869aeed1d9e9fad1df7b5821
-
SHA512
786b9fe8a0271a4efc75a07beca30f27e162fd9cf123731e4ccca55c5660fe11c19e96a292cd3d189dadf2331796e2f7f123daea2711733cbde08519b2915245
-
SSDEEP
24576:jpkZ3935xNeEx6ZUR7FCUj2BJ1kaPvdlzI6HE8/L:qF9vNeEx62A1XPnbk8/L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42cdbae7b77bdcd4dbfe2d516e4fa23c_JaffaCakes118
Files
-
42cdbae7b77bdcd4dbfe2d516e4fa23c_JaffaCakes118.dll windows:5 windows x86 arch:x86
0b2e22ff2748aa0200c87f8c28482c8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32 rasapi32
GetMenu �-
Exports
Exports
Sections
.text Size: 416KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 816KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ