DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
2ec4ff302d529420800742a0b5970af5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ec4ff302d529420800742a0b5970af5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ec4ff302d529420800742a0b5970af5_JaffaCakes118
Size
234KB
MD5
2ec4ff302d529420800742a0b5970af5
SHA1
17a44895279ba8be5ab1a098d3ff846f8081afb8
SHA256
cf6d1eedab5ce2a5df0b1e96cb49a8cb1591bd8f9475a6e616d5693021a118e1
SHA512
956e5d9be74a2cb828df50172c55a1cc44ffa0a62bd7543ba37914dcb740d2b6bc4b93ba370e637822da559594d552de5963c0f32a6f35aa860b5bf92744de14
SSDEEP
6144:bdGWhhdGWhhdGWhhdGWhhdGWhhdGWhhdGWh:wllllll
Checks for missing Authenticode signature.
resource |
---|
2ec4ff302d529420800742a0b5970af5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ