DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
06b680a33de736d590061982e2d8d7b5_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
06b680a33de736d590061982e2d8d7b5_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
06b680a33de736d590061982e2d8d7b5_JaffaCakes118
Size
32KB
MD5
06b680a33de736d590061982e2d8d7b5
SHA1
56c543079a21f2861f700516ddbf38626f2f4fcf
SHA256
e05804d98a245517d56a4e4c2f20c5ae9c19f93b113a402cdeb8a5af0ede4dff
SHA512
62ea69975f849f9df725bff1fcf4d83f7981ff29d5c12f83586b868bc76e7542e3c6a0668ca3fc4e1383d59c459dcbc695f3003d246b171d9b8dc64ce31949cd
SSDEEP
768:h+ThI7GyYyWqMo4uA4iMv2Cr0j6xYswMURf:h2haYj+zA823j6aRf
Checks for missing Authenticode signature.
resource |
---|
06b680a33de736d590061982e2d8d7b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ