DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
fa9d8ace144d3f2823eb4e6e92a8fdda_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fa9d8ace144d3f2823eb4e6e92a8fdda_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
fa9d8ace144d3f2823eb4e6e92a8fdda_JaffaCakes118
Size
39KB
MD5
fa9d8ace144d3f2823eb4e6e92a8fdda
SHA1
d7cf530d02e710f405a8f14bcbfa8686cb1a7e43
SHA256
03a488caba1799eb88c3aba1bf68d1eb353fb0ed16b34000e08258f3a42eac8d
SHA512
a96fed133e8e390fdef8a963fbf93dec4f5a4c7114131e5a1148eb5f77cc87af7105620583837c5ba01d10b9e9d838510f33761657b29dd1938ace95ac1aeac5
SSDEEP
768:+eP9hcVhBE+q5OpBlMYCKJ38k0gcwzmYRzRMEuwgYNgC4:+kf8sOpBlMY53lLNzmOzKY+d
Checks for missing Authenticode signature.
resource |
---|
fa9d8ace144d3f2823eb4e6e92a8fdda_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ