RunDllHostCallBack
����
����
Behavioral task
behavioral1
Sample
f1c76ea412b731ef4524ffa2199e87e8_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f1c76ea412b731ef4524ffa2199e87e8_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f1c76ea412b731ef4524ffa2199e87e8_JaffaCakes118
Size
699KB
MD5
f1c76ea412b731ef4524ffa2199e87e8
SHA1
9d5d942744bed0b38b8607a531852fd6a664f146
SHA256
08f972f132d4fdcd3f23de287dc08eca07a63d6768ced06c81ea5d7e3c4a03d9
SHA512
9f2cb694dd0ee08a68775f7db52f0405df6fa8fc0549432cb3e97153d54d0f2b1ffa3563a75e9eddc358366eaedefeac6d76d63caf1526d14ae02f8c341abf3c
SSDEEP
12288:fzyxWNR+MKL0Id6pgKKTrcPiF3Z4mxxNxNzG0Gxlbvpu:LyqYMKL0iTmiQmXTNzAPzpu
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
f1c76ea412b731ef4524ffa2199e87e8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RunDllHostCallBack
����
����
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE