RunDllHostCallBack
_�����ӳ���
Static task
static1
Behavioral task
behavioral1
Sample
1c769ab9bc9a53ab1a0caa1095a0c237_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c769ab9bc9a53ab1a0caa1095a0c237_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1c769ab9bc9a53ab1a0caa1095a0c237_JaffaCakes118
Size
896KB
MD5
1c769ab9bc9a53ab1a0caa1095a0c237
SHA1
e34606077aaaed2e52d0ec8845fa8587303375c7
SHA256
70a10a64198f4137dd04cefe44fbfc6c3d79b9fe4e32123a00b91ad770116e04
SHA512
f5f4a88979ad442919a1a853ca42009920426c135412988183197efe6557c92d02c280d39788ecb8c3df2f3ac1cf97c2af558f5a8e8fa1d218af6f3643a1f69c
SSDEEP
24576:6EHaLQVJ0JQ4Z+f86g7eCLZyT+dJ+1tuSOjWcCDUiWBwrkm:6EHa/C4C8Z7eeZY+dJ+1tbOnCDTz
Checks for missing Authenticode signature.
resource |
---|
1c769ab9bc9a53ab1a0caa1095a0c237_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RunDllHostCallBack
_�����ӳ���
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ