DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
0fb4f7a2f28757f4c9979c8d48d255db_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0fb4f7a2f28757f4c9979c8d48d255db_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0fb4f7a2f28757f4c9979c8d48d255db_JaffaCakes118
Size
36KB
MD5
0fb4f7a2f28757f4c9979c8d48d255db
SHA1
3d79689a3db16e54e722cd7a192a0c1fbce86d01
SHA256
e4ea38af1ce6afeca4311a8b79652c4ff9d1455ff64fb9d2f4a806607ed1e12a
SHA512
4cb87a959ba3780d1c298caf2d7b7e8246559789511ac0c2593c8d32cc8551a35ff2942a8b7920cb550de42428dba8872109616363bc2102b097c1d57e03b760
SSDEEP
384:7d+k6d9hJy1cdH25C31akvwrLN6UdeHE7ob70jV+kWMgJBtzwRZDhJXpzdDI5GMK:x+v9hmFIUzKxtETDrldSGMfgnWwjd7
Checks for missing Authenticode signature.
resource |
---|
0fb4f7a2f28757f4c9979c8d48d255db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ