RunDllHostCallBack
Behavioral task
behavioral1
Sample
eafeaf0733010a60104848bce445e6f4_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
eafeaf0733010a60104848bce445e6f4_JaffaCakes118
-
Size
90KB
-
MD5
eafeaf0733010a60104848bce445e6f4
-
SHA1
af380a4ee82ed0415245f9d99a415e4d24e0101b
-
SHA256
3ef33b1518586260c2b9d1f0cf68cd803a3fa3fab5e2f8d5c37307cb38a4d94b
-
SHA512
366fef89398a1d8b176954deea087f8ca3a75731c67981b68b04383eba03f95b0e59c9c6205c240544ead4e8b3c24ac4fed046fa4bbaa10a2417b4d13e1b5c56
-
SSDEEP
1536:X28hXgjjAuzMzpe5KPMRGWETiCEL1KUonk3bD2K7ax5/7GXwrO:3Jujt8pecNWBLQTnk3H2K2T/7GAC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eafeaf0733010a60104848bce445e6f4_JaffaCakes118
Files
-
eafeaf0733010a60104848bce445e6f4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE