RunDllHostCallBack
Behavioral task
behavioral1
Sample
b282974db11f9b8439b872545912f746_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
b282974db11f9b8439b872545912f746_JaffaCakes118
-
Size
106KB
-
MD5
b282974db11f9b8439b872545912f746
-
SHA1
969a7d7329e3108ed34951df5fad527ca80e48d2
-
SHA256
39b7141b6cc49c93bfab84268325236e013f036de6e71b33531672f3aa005b60
-
SHA512
2bd097434421a4b1a9fb262162408e895c6b0b8475dce79356cb8f0ec233dd7597a7db0f15fc0c17f981243586dffac855d784fc34330ce5e14a7de3c40384d9
-
SSDEEP
1536:nQBkMh4tIVhUGW+xLLGpqwPeTA8OUwWaWbmi4m8Ejj2FTZLUf:viU2hUGRnGoZTtfwWdmi4m8EjCNc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b282974db11f9b8439b872545912f746_JaffaCakes118
Files
-
b282974db11f9b8439b872545912f746_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE