DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
3c32984595b3229ba20d9f23ff6ec869_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c32984595b3229ba20d9f23ff6ec869_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c32984595b3229ba20d9f23ff6ec869_JaffaCakes118
Size
266KB
MD5
3c32984595b3229ba20d9f23ff6ec869
SHA1
f62d34669885ac182e0ff51fcf9b4cb37b8e4f8d
SHA256
f247db847a0e66cbe3817ecee93d9a5247699888da601a0c1a11444d1e2d168c
SHA512
9616472c981478dc5ac8bb3f2adcf26565b39f2489b2e0840c9c90e54294f45b698aa5f9f255282a2750f5d63c7b075234f7d058384382992a4895f58f6bb73b
SSDEEP
3072:g5hxlsmAt25hxlsmAt25hxlsmAt25hxlsmAt25hxlsmAt25hxlsmAt25hxlsmAt:Ophphphphphphp
Checks for missing Authenticode signature.
resource |
---|
3c32984595b3229ba20d9f23ff6ec869_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ