RunDllHostCallBack
Behavioral task
behavioral1
Sample
723e056a3ed6f70bd4e6f073069130e4_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
723e056a3ed6f70bd4e6f073069130e4_JaffaCakes118
-
Size
82KB
-
MD5
723e056a3ed6f70bd4e6f073069130e4
-
SHA1
0eb63acba2fcc3392805fdbf11429b52364271a1
-
SHA256
a034331d1a412fb3d53c5c5471952f34e56282057180b80828e7fe2cbf5cd88c
-
SHA512
edbf8897d4549f0e5f6d1bd65e829fe1c55ee7932c74c5030734cc7badb998867b02cc081fe6d0713425b4a603f471f540eb1cef480288ec52d75b1776235e1e
-
SSDEEP
768:VhAR0QxZn6x2fa3YCYaEeZhJ6W8ncm3cRnbtyDDnWX1cFPtDm1oU5L+/QJYsFyOh:VhAln6fjYuvecmKinW8FMoUGsEQBZUYx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 723e056a3ed6f70bd4e6f073069130e4_JaffaCakes118
Files
-
723e056a3ed6f70bd4e6f073069130e4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE