RunDllHostCallBack
Behavioral task
behavioral1
Sample
69378baeef95d83454a3e097ccca87fe_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
69378baeef95d83454a3e097ccca87fe_JaffaCakes118
-
Size
109KB
-
MD5
69378baeef95d83454a3e097ccca87fe
-
SHA1
001593e36ca99e6d65b755cc79877351439e5c22
-
SHA256
a5b7499a08774067630ed54d9892e117bf89a6eabb4db2c69d79a7849de728ae
-
SHA512
bc82d16b5586638db02105c9594245aa05a8889b5348e345a731d7ff17258f6a6c0f274eee91732d15a85f2d7968e3cb3b99266a9104a333cdefae5072f19245
-
SSDEEP
1536:DF6sVBxwnCjoV+dbIwZneOlFd8PnbkDYAjr/L2Fj3yIbWL0MvwslNy3HqWy:R6sVz+kJdbIeeOV8Yjr/qV3yqj4vy3Kp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69378baeef95d83454a3e097ccca87fe_JaffaCakes118
Files
-
69378baeef95d83454a3e097ccca87fe_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE