RunDllHostCallBack
Behavioral task
behavioral1
Sample
c7e32f0a1072e325afe9d28709184f70_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
c7e32f0a1072e325afe9d28709184f70_JaffaCakes118
-
Size
86KB
-
MD5
c7e32f0a1072e325afe9d28709184f70
-
SHA1
cb2464de7a3f7b5f59537902d9a1ab09dfa68380
-
SHA256
46bf78cdf0ad75e7383ac44f60587022db6b361a215dff17e3d47f4b5d328219
-
SHA512
278c8d2f2dca87a0296abb7e37bed3d000f84b70ef99ee9494d4e0a6278776b5256fd6ab7b1310e1dbb5d91c988cc58d2be6790b1b68790b262885be95c8e6d0
-
SSDEEP
1536:mkJvFEhpEWiQW8xs5JEoyNxd39SW4oMsAf+3nCsXX/aGsnGoI3:mkJNEhOW1W3JEp74YAu3faGJ3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7e32f0a1072e325afe9d28709184f70_JaffaCakes118
Files
-
c7e32f0a1072e325afe9d28709184f70_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE