RunDllHostCallBack
Behavioral task
behavioral1
Sample
fb331d574119432910357977e5033b41_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
fb331d574119432910357977e5033b41_JaffaCakes118
-
Size
112KB
-
MD5
fb331d574119432910357977e5033b41
-
SHA1
b141c71ecc9eb4a5845e9e8c6146ef680ec15d16
-
SHA256
0a3c7a359f343e19b92cb5f8003dcfedcdc74d7b42769ee3316dbcf0fad033e1
-
SHA512
6019e95eb2fccc4c2142b8e40b19d8523215faf9c9b21ceb16f94dfba477e0884f014c537c3d7dd3d108dc22a62080a8ae2ec7d1d1a03f72ac289bd10c6cc831
-
SSDEEP
1536:mfjJPQ9k7lyMeDh7UHRmJ8xv86JfHoKBYa/eKk4iRJf1clVtAunUZS:mfjJPm21eD9e8GxU6JQERk4wdclcpQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb331d574119432910357977e5033b41_JaffaCakes118
Files
-
fb331d574119432910357977e5033b41_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE