RunDllHostCallBack
___�����ӳ���
call_��ɫ����
����
�����ӳ���____
Static task
static1
Behavioral task
behavioral1
Sample
3e26bddbf15950620e0e9891854cfce6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e26bddbf15950620e0e9891854cfce6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e26bddbf15950620e0e9891854cfce6_JaffaCakes118
Size
1.2MB
MD5
3e26bddbf15950620e0e9891854cfce6
SHA1
57909acc4e39fd61ff4cf29173325d1493baa089
SHA256
db58d343efbf99c39999f4c7e3d16217cab3dc664c6d81d2216d34de112eed73
SHA512
20dac6324b017ba80e265909d181cde8bee64963377fe95dfe492996563085b3cd917a300a913af1363a7438a71a01e0708b919aa6146848cb20e904329e597d
SSDEEP
24576:BLW2JwUk2S6M8QjQPlGQl7vuXKC2/Nbb9hhXUdjL4U:BK2J42S68je0YvuXKPlbBhxMv
Checks for missing Authenticode signature.
resource |
---|
3e26bddbf15950620e0e9891854cfce6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SaveDC 0c
RunDllHostCallBack
___�����ӳ���
call_��ɫ����
����
�����ӳ���____
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ