RunDllHostCallBack
Behavioral task
behavioral1
Sample
b72bb37973fd8dc544efeb387036efee_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
b72bb37973fd8dc544efeb387036efee_JaffaCakes118
-
Size
97KB
-
MD5
b72bb37973fd8dc544efeb387036efee
-
SHA1
9ff1f8ae384db37016709e672b8f7d90ff866a84
-
SHA256
b6a0ee48086ba212c4fbccbba7378220e6bdfdc3f04b6bdfe4ea9818ffdf557a
-
SHA512
d6e8901711e5b9ac35398fd90ac7ba4e9a1e1b415e8dda2eb3935810e91a60b0d27c48105bf12d159a50996246659bc14a7720f420a504c2c1950e723d846f69
-
SSDEEP
1536:dC42owFQhOndUNOyTV0X1KaL2q2RR54tsSeF6KuOM8NV:dFhw9d6TQ1KaQRz4tsBF28v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b72bb37973fd8dc544efeb387036efee_JaffaCakes118
Files
-
b72bb37973fd8dc544efeb387036efee_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE