JgedCreate
JgedDestroy
JgedDisableComponent
JgedDuplicate
JgedEnableComponent
JgedProcess
JgedSetOption
JgedStart
Static task
static1
Behavioral task
behavioral1
Sample
c83248c5ca65fd44f439abf1a586ee38_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c83248c5ca65fd44f439abf1a586ee38_JaffaCakes118
Size
120KB
MD5
c83248c5ca65fd44f439abf1a586ee38
SHA1
17bb8c88e1d172343c34a15f8c32a4bd6ff8c769
SHA256
ddc113c7ffc81f006adac9240bd8f533baba813751afb74cc329702090053e7d
SHA512
65cb6dfef3357d2fd6a48fddc1c4ee991c194475a6c3580fbefc550b51fa8c40f42265f640c931f7370484e006afec4946252daf945a01fd3eb8987bc81e70c5
SSDEEP
3072:E61Ye3TaEu2CoCcn3zO7A4D8XjtbzLWl1NgHA5Ad:1Ta12CoCckAe8zc9g
Checks for missing Authenticode signature.
resource |
---|
c83248c5ca65fd44f439abf1a586ee38_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_initterm
_adjust_fdiv
malloc
memmove
free
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
SetErrorMode
LoadLibraryA
GetProcAddress
JgedCreate
JgedDestroy
JgedDisableComponent
JgedDuplicate
JgedEnableComponent
JgedProcess
JgedSetOption
JgedStart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE