DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
2c593698caa1d326d268a34d47c3b691_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2c593698caa1d326d268a34d47c3b691_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2c593698caa1d326d268a34d47c3b691_JaffaCakes118
Size
124KB
MD5
2c593698caa1d326d268a34d47c3b691
SHA1
be6fbc27e8fde5caca39df560d2f2d5103a3c326
SHA256
57354ad419b82c307160eff3f7cf8cc4eb8ae140774eae4cf15412abeab0797f
SHA512
e929a5fa10ce3a106e51c912f130eefe489ea3c08508311919d0c08a89290f57dc38d6134e958b53f9faec841ba53e2c9d603156590577e52208086d5ae61e1b
SSDEEP
1536:nkfTnzRk4H+s9kfTnzRk4H+s9kfTnzRk4H+s9kfTnzRk4H+s:wn9k4fun9k4fun9k4fun9k4f
Checks for missing Authenticode signature.
resource |
---|
2c593698caa1d326d268a34d47c3b691_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ