DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
25659a5492996334c089539f32b3efe5_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25659a5492996334c089539f32b3efe5_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
25659a5492996334c089539f32b3efe5_JaffaCakes118
Size
33KB
MD5
25659a5492996334c089539f32b3efe5
SHA1
1ef13a162fde9d02fc340838609cba1a228cef4e
SHA256
9d7df5ca000dd85044fb44d4a207471fa028526d193066038bf49081c86980d7
SHA512
feeb703caae1e9479f107fbc61f53c6bd113e3683c14dd141fbf06d23b9bb5b0c2836a1a6c4d30a5a8f02f405dfc2516edaf3d1bcf11fd08b7a8f3750c8ec754
SSDEEP
384:+d+k6d9hNlbHJUD84gEAPFJT9nFThE7dhtPXmRr1VpWR4EzZr7S26Qf8xrCHSHzJ:8+v9h9UDNAE7LErhW2wDBkxraSRv
Checks for missing Authenticode signature.
resource |
---|
25659a5492996334c089539f32b3efe5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ