DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
40fa19c790d435b08d5654af8c43e3e5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40fa19c790d435b08d5654af8c43e3e5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40fa19c790d435b08d5654af8c43e3e5_JaffaCakes118
Size
220KB
MD5
40fa19c790d435b08d5654af8c43e3e5
SHA1
371e851caaab2239dcd4c5f3dc096bebd5e523d3
SHA256
42edfe150f080637f70a15ee406cf3982d7e5a5edd5800c72bada42ae4e702c6
SHA512
7edede77119c3843a84287c35b74ddc4d83deadb79763536635cfd0cd46d170bf07f3441719bb5a8336e769ac50f0c54ee092dcf0759f451199e5a19c5951dd3
SSDEEP
6144:2QXWMtPQXWMtPQXWMtPQXWMtPQXWMtPQXWMtPQXWMt:bXJoXJoXJoXJoXJoXJoXJ
Checks for missing Authenticode signature.
resource |
---|
40fa19c790d435b08d5654af8c43e3e5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ