RunDllHostCallBack
Behavioral task
behavioral1
Sample
c8e11e2a4878368f56d475b952a80a80_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
c8e11e2a4878368f56d475b952a80a80_JaffaCakes118
-
Size
78KB
-
MD5
c8e11e2a4878368f56d475b952a80a80
-
SHA1
8f82a736182f9e571893aeb29922193307a356c0
-
SHA256
f69fa3c7c341cff45f5ce5a5eb3e461e8ae4b182a0b1535f705aa364152e90af
-
SHA512
3e29b663d81867951af1968831613fcf5b857a9cb199d67b4965efac5b1c387aa51ea98690d394246b7ba99e6624abac64dc0b18e5d1b998060bb89e3f6fedf3
-
SSDEEP
1536:UTEmAfnmTdX7ZAni/rUSUd9+VfgT5C3bB+sQziI3:U4mumTdX7Kni/oSUb+VfFhQzt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8e11e2a4878368f56d475b952a80a80_JaffaCakes118
Files
-
c8e11e2a4878368f56d475b952a80a80_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE