DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
e936a2d149125edbda0b6302a5b5da25_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e936a2d149125edbda0b6302a5b5da25_JaffaCakes118.dll
Resource
win10v2004-20240319-en
Target
e936a2d149125edbda0b6302a5b5da25_JaffaCakes118
Size
136KB
MD5
e936a2d149125edbda0b6302a5b5da25
SHA1
f57762293410581f36cf152d2d9a7cd193306205
SHA256
76fca7bf43f1ab29660eedfc9c49fb24ab52f9ac6a0d18bd5536d6ef4e1d38a8
SHA512
d25bbe6ac3b2ef41103bef2112bdb540c56825c1a55b961d4837df42b5b93b16c088f4d51c49af5c73caafa2b8af01069042df02e1800462b6f6c7fc9efa21be
SSDEEP
3072:tsyK57E1cRsyK57E1cRsyK57E1cRsyK57E1c:WyK57EzyK57EzyK57EzyK57E
Checks for missing Authenticode signature.
resource |
---|
e936a2d149125edbda0b6302a5b5da25_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ