DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
28acff351a443eb9f02f01a6ed97adaa_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28acff351a443eb9f02f01a6ed97adaa_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28acff351a443eb9f02f01a6ed97adaa_JaffaCakes118
Size
31KB
MD5
28acff351a443eb9f02f01a6ed97adaa
SHA1
ebbd12b13ab2bb418148342b4acdb106ae917f74
SHA256
31aa58a78ebd3f8f44371ff912cfe4d7b53dd139f775ebd88d56b6640c51afe9
SHA512
b93ddf2f402e92dc615abec7138bf121dfab961ea497b5d4ae34187c47789b1de7e58fa51c4c6c9d4c6e6dcc55d3c2edf4d89a366c61212fe8f0c3c74815dd2e
SSDEEP
384:zNNe06t9hcBVP5iqUMo1m97ukMdImdfN09injTpCQxd3Fgv78WIHFqmFrkk:LeP9htjG9p4fN0ShtxtFBWwVFj
Checks for missing Authenticode signature.
resource |
---|
28acff351a443eb9f02f01a6ed97adaa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ