JgedCreate
JgedDestroy
JgedDisableComponent
JgedDuplicate
JgedEnableComponent
JgedProcess
JgedSetOption
JgedStart
Static task
static1
Behavioral task
behavioral1
Sample
8b10092b3215b4a72242120bd34247be_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8b10092b3215b4a72242120bd34247be_JaffaCakes118
Size
168KB
MD5
8b10092b3215b4a72242120bd34247be
SHA1
0c1a05675c49ce3f65e3c8a44125f57f4ba87347
SHA256
26616b37b6d93af0393b5edbdaee811d0e7a0a0c87c2f40446198116f57fee8f
SHA512
0af84da7f789c98a90a5cc0236ab8838047fe785dbc56a3b5a4d3032e6ec462579ec8ccdb09af9d35e7a1f281d61e5cb02afe3b7e653fbac2400ea8bded730a8
SSDEEP
3072:C61Ye3TaEu2CoCcn3zO7A4D8X0kaOa0SB9lI6NQ3TaI49gCxW24UydiXsvMp:PTa12CoCckAe87nSB3ZOaI4SCxW0DN
Checks for missing Authenticode signature.
resource |
---|
8b10092b3215b4a72242120bd34247be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_initterm
_adjust_fdiv
malloc
memmove
free
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
SetErrorMode
LoadLibraryA
GetProcAddress
JgedCreate
JgedDestroy
JgedDisableComponent
JgedDuplicate
JgedEnableComponent
JgedProcess
JgedSetOption
JgedStart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE