JgedCreate
JgedDestroy
JgedDisableComponent
JgedDuplicate
JgedEnableComponent
JgedProcess
JgedSetOption
JgedStart
Static task
static1
Behavioral task
behavioral1
Sample
16d74f72935d863751d019917e32bf9c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
16d74f72935d863751d019917e32bf9c_JaffaCakes118
Size
240KB
MD5
16d74f72935d863751d019917e32bf9c
SHA1
9f650e12b9f7905f4d210be7c50d359b600f955e
SHA256
80ef9e6cc23d6a745c78ca09b9363255565b8d3dc02ab7bc6e83c95219f6c044
SHA512
1bf11a10401e1ad5d4d69f69c68df8030738ceb8390bc553e7a1c3a3797d5825d29c31cf91671d8242b93d2d145e53001efe586ffdc5394b3beda3dae43af41c
SSDEEP
6144:9Ta12CoCckAe8ABiO7AwnS35RTj21mPmJCOLqNV9Hw:Ck3duAw6THYmeJEV9Q
Checks for missing Authenticode signature.
resource |
---|
16d74f72935d863751d019917e32bf9c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_initterm
_adjust_fdiv
malloc
memmove
free
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
SetErrorMode
LoadLibraryA
GetProcAddress
JgedCreate
JgedDestroy
JgedDisableComponent
JgedDuplicate
JgedEnableComponent
JgedProcess
JgedSetOption
JgedStart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE