RunDllHostCallBack
Behavioral task
behavioral1
Sample
fc27def6f4cfbc1f38fac59f6ce307fd_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
fc27def6f4cfbc1f38fac59f6ce307fd_JaffaCakes118
-
Size
6.4MB
-
MD5
fc27def6f4cfbc1f38fac59f6ce307fd
-
SHA1
9f714d75f59b1199e975a94409846689d4c77252
-
SHA256
c886ba9effc2cd168575b38316b6ba6845504179cf96f66d4df44503bf182bec
-
SHA512
74b9d4be972f05f47b164903857f6ca861c0b3eda68978ec8dd6ffae8d0cd140b10d9a3c9788ddb3dc528b7c5b290076791b69db63186b2c82c36aae738f0ed1
-
SSDEEP
3072:GHDix07ufQ2nBdON+d/CGcMZ98fGASfeI:GHDsFQ2n/O8d/CGciumfeI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc27def6f4cfbc1f38fac59f6ce307fd_JaffaCakes118
Files
-
fc27def6f4cfbc1f38fac59f6ce307fd_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE