RunDllHostCallBack
�������ȼ�
������Ѫֵ
�������������ڴ�
������������
����д�ڴ��ı�
����д�����ڴ�
����
����
ȡX����
ȡY����
ȡZ����
��Ư��ô
�Զ�������
Static task
static1
Behavioral task
behavioral1
Sample
5c195f3405c8a477f3c738816c8470c1_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5c195f3405c8a477f3c738816c8470c1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5c195f3405c8a477f3c738816c8470c1_JaffaCakes118
Size
656KB
MD5
5c195f3405c8a477f3c738816c8470c1
SHA1
ccd21c22378fa8cd689eee8cd305d2712907e265
SHA256
7498a34bdb531d291bb9d76a6435c581bfb1f0519d6be5430a6907a98c48d8ca
SHA512
51a1e690cf7d14e82329dd12edaf55588e37201f99f6dbbca272d9f505d0858d58505ecf3e603fdc59c7111c2e01855288eefe7026027cfdf17deafbef6b70b4
SSDEEP
12288:9FlnBpN5/LUYJ0q4aBNDcWE8rhh6amM5lNwSJUtuGKYNT:9FlnzNmYJ5fNDHEG1NwSJUtbT
Checks for missing Authenticode signature.
resource |
---|
5c195f3405c8a477f3c738816c8470c1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RunDllHostCallBack
�������ȼ�
������Ѫֵ
�������������ڴ�
������������
����д�ڴ��ı�
����д�����ڴ�
����
����
ȡX����
ȡY����
ȡZ����
��Ư��ô
�Զ�������
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE