DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
2f313035003c7c2b3eb0864d59b6d833_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f313035003c7c2b3eb0864d59b6d833_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f313035003c7c2b3eb0864d59b6d833_JaffaCakes118
Size
37KB
MD5
2f313035003c7c2b3eb0864d59b6d833
SHA1
cdfbe89d5d59e852570ae361e838a538ca3dc6b5
SHA256
1c7cd50113f6c1098feda383cefbb07877dc90031cf34559015d7a0d53d6623b
SHA512
90a6763c7410364819ab300ea92fb52d7aeb10812b7d38a36195e552464cfe627c2e048189e5ca3e93aa752b9a8fa5aaba65977bc1a06a3bb784c79cf1ce89de
SSDEEP
768:R3I/QHrfBIqTP9xu7KmoWiQuPUldIwnesvHR:CoieqK9Kjf5
Checks for missing Authenticode signature.
resource |
---|
2f313035003c7c2b3eb0864d59b6d833_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ