RunDllHostCallBack
Static task
static1
Behavioral task
behavioral1
Sample
84e88f93f20c3f87fd48166b0c359bb5_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
84e88f93f20c3f87fd48166b0c359bb5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
84e88f93f20c3f87fd48166b0c359bb5_JaffaCakes118
-
Size
872KB
-
MD5
84e88f93f20c3f87fd48166b0c359bb5
-
SHA1
3ef6d27d90dbb1387b63baf108491a5276086221
-
SHA256
38784af485ab146871dad31bfa879e25f2c8513a135a9308e92e85a77d4854ca
-
SHA512
1480e9dfc3fcf1f68d81348534d44c42ff7bf4d28f3695dfba6afb56094a23fc8c282bae63b5a7a5a61815b52b3dca99d7cb7822ceabcac33ca4795855c498ea
-
SSDEEP
12288:lbUD9ULs1dXeDrYHocUKErHdUFKDRbBZ2ucU9pOjWtGNgDUiWqWNKDrt2w:2xJ0rYHiCMRbbIUDOjWcCDUiWBwrkw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84e88f93f20c3f87fd48166b0c359bb5_JaffaCakes118
Files
-
84e88f93f20c3f87fd48166b0c359bb5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 240KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 128KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ