DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
fff948c7d3efbe7e478efc81585f8526_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fff948c7d3efbe7e478efc81585f8526_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fff948c7d3efbe7e478efc81585f8526_JaffaCakes118
Size
234KB
MD5
fff948c7d3efbe7e478efc81585f8526
SHA1
5fdfee1117add97e044f0c4557a194be43bad0fe
SHA256
4301cbdea640cd5675b9706daf0ef5c2240d5f9eb297b31a84e48a043bfaf3f9
SHA512
3aa5e6be33a92d6e3a370cded73080d7d7b6b58799900f77ef1d73c01093d41cb834dc885418907e97888007d3eb85a84cb0057d9faea0151e56e8501e19a345
SSDEEP
6144:jnHTyPTnHTyPTnHTyPTnHTyPTnHTyPTnHTyPTnHTyP:v222222
Checks for missing Authenticode signature.
resource |
---|
fff948c7d3efbe7e478efc81585f8526_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ