RunDllHostCallBack
����
����
ȡX����
ȡY����
ȡZ����
���ֹ���
�Զ��幥��
Static task
static1
Behavioral task
behavioral1
Sample
e02a8a576d7db28b031fdcd223bd8c55_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e02a8a576d7db28b031fdcd223bd8c55_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e02a8a576d7db28b031fdcd223bd8c55_JaffaCakes118
Size
644KB
MD5
e02a8a576d7db28b031fdcd223bd8c55
SHA1
caa50fdd7f9ade17245321941f575f2d378c75d7
SHA256
2c12186874eea606e4752539c2e9f853a45f2371bcf4b442dba03095b765d50e
SHA512
875acb92361312ff8e1ac4c00f1a85f09d1397af825252b98c99cd6965e1bd6518853cbd6abfaa7352183de5fa6c5e306d912edb3fd5ad8d80e442b8c4c6c7a1
SSDEEP
12288:eeEjN/DxzLE6lOuan4zjh69e1R8yamM5lNwSJUtuGKYNTV:GjNRZvqNwSJUtbTV
Checks for missing Authenticode signature.
resource |
---|
e02a8a576d7db28b031fdcd223bd8c55_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RunDllHostCallBack
����
����
ȡX����
ȡY����
ȡZ����
���ֹ���
�Զ��幥��
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE