RunDllHostCallBack
�����߳�
���ܽ���
ɾ��1
ɾ��2
Static task
static1
Behavioral task
behavioral1
Sample
6ab2c9c230e31eb8eff444b5128a0d22_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6ab2c9c230e31eb8eff444b5128a0d22_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6ab2c9c230e31eb8eff444b5128a0d22_JaffaCakes118
Size
1.0MB
MD5
6ab2c9c230e31eb8eff444b5128a0d22
SHA1
957316ae6e4e018f8a6491d98872abd149837ec6
SHA256
c8fd8817dc2a8bc9146d15236ac604de06c233a7e60a8e8696c63bfd2cd788de
SHA512
896828e1f3d434aa054af353bca97a61ed94a666c67c2eb606b083d03020d76418d6e73b818425cfaae552f6ce32ca054cc9ba6124b984327c99dbcdf62059d6
SSDEEP
24576:WaeHacpD6fmyajvYfx1m+XdfjXY0Z8JY20O+L5Y6Bs0Ja0:W5Tp6uyaWlXdbY48JmOy5Ywa0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
6ab2c9c230e31eb8eff444b5128a0d22_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RunDllHostCallBack
�����߳�
���ܽ���
ɾ��1
ɾ��2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE