RunDllHostCallBack
Behavioral task
behavioral1
Sample
fe6967c2f9d27c314d4aef7a580122a2_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
fe6967c2f9d27c314d4aef7a580122a2_JaffaCakes118
-
Size
91KB
-
MD5
fe6967c2f9d27c314d4aef7a580122a2
-
SHA1
64ae4aa5cd55192e9950c2ac6175c81b8a2887f7
-
SHA256
137f222452f13eacb86c9a8251f3e22d0e37d9c5c194f6dfeaacc415b5091ab4
-
SHA512
a506ffddc0e5ce75cd2f9e112da1febd7b251e49e874fb1bcdc85a90abb8d5ceff5de7414e9a46640ad17aac3304a6c0d3fb131d674a41ac8233fc248006569c
-
SSDEEP
1536:mkJvFEhpEWiQW8xs5xxwoJNQUeRifIlias5GidcvP24Wy2N5:mkJNEhOW1W3xxVbQU2YIlirGidcm4Zc5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe6967c2f9d27c314d4aef7a580122a2_JaffaCakes118
Files
-
fe6967c2f9d27c314d4aef7a580122a2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE