RunDllHostCallBack
Behavioral task
behavioral1
Sample
4e15e574fe109788e38c9fc30e3caf65_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4e15e574fe109788e38c9fc30e3caf65_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
4e15e574fe109788e38c9fc30e3caf65_JaffaCakes118
-
Size
92KB
-
MD5
4e15e574fe109788e38c9fc30e3caf65
-
SHA1
3939c23966bcd11b8cf6765d3ff36d58b1ca0836
-
SHA256
8b1c4d428db6c3a7e6c1a2ae41de09ba7ada20b93bdb6458c183ed559794cf28
-
SHA512
fa1c99545d63de66c983b1ce503716d7f11c3f6685aa1209852c65178816859202c2dffeb37e67a8c229b2029a8f0f446123c903fd52c34ce4fceb37378aadcc
-
SSDEEP
1536:niIK23G0LL0q9yiWmQ9h4eZsNR//fDmLascVk/tAEzNDBu/SeCz:nnt20nn9hQ3cNN/KLaTVRKVGSzz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e15e574fe109788e38c9fc30e3caf65_JaffaCakes118
Files
-
4e15e574fe109788e38c9fc30e3caf65_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE