?RunDllHostCallBack@@YGKKKK@Z
Behavioral task
behavioral1
Sample
11a7e168f7813ecf67a3f4d6430c4de6_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
11a7e168f7813ecf67a3f4d6430c4de6_JaffaCakes118
-
Size
93KB
-
MD5
11a7e168f7813ecf67a3f4d6430c4de6
-
SHA1
045fe0f85a2bc7cb73a46a2ac3b0d89841e5e1be
-
SHA256
bee41e41a774aac6e03b504a89f365a5623fb6af46dff0bcb246175920d2c7e2
-
SHA512
2a6204d83e81b18ba7ef1f21e84d44885f60b372017402d178c592f9a82572c38c5089c83ccf9f3a7582da7eaa07c521ce4fb7f88b69de895538e75b2173788f
-
SSDEEP
1536:wLzuWEiUqQP3Dpp5irL/xIKwxB94h3ym8cEVcJ0nR/8bIlvYdS:K9EnbtpU5Ihs8iJ0nR/qQvWS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11a7e168f7813ecf67a3f4d6430c4de6_JaffaCakes118
Files
-
11a7e168f7813ecf67a3f4d6430c4de6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE