RunDllHostCallBack
ȡ����
Static task
static1
Behavioral task
behavioral1
Sample
67e7abc3cdfcf7029ce407906f50ac55_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67e7abc3cdfcf7029ce407906f50ac55_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
67e7abc3cdfcf7029ce407906f50ac55_JaffaCakes118
Size
1.3MB
MD5
67e7abc3cdfcf7029ce407906f50ac55
SHA1
ad434feca31d34120717884530adc9fa1219420b
SHA256
582a8442017fe863334d017e6038dbfa54edbbd09843ff76b4cfa671ab49b7d3
SHA512
dc6e70393ef31cd33de45ce94de361e61f8a87addeb17c4f007ac2ee3e6fa3a521232dbaaad3987dc07d3ec13625efff87bfedfcb5988195d8fd4d8501713508
SSDEEP
24576:On2M2wB2O1w5L6+UJlBo6mMxDXAt8t9U4p8FSe:OEh6FweTbq
Checks for missing Authenticode signature.
resource |
---|
67e7abc3cdfcf7029ce407906f50ac55_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RunDllHostCallBack
ȡ����
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE