DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
49ebdc7b10d2934af3a298014ac4497d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49ebdc7b10d2934af3a298014ac4497d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
49ebdc7b10d2934af3a298014ac4497d_JaffaCakes118
Size
227KB
MD5
49ebdc7b10d2934af3a298014ac4497d
SHA1
e094e391d0952af2f7b71d63a84dda498f71bdee
SHA256
0307ac6271794454065ba3e11b8c8bbd26b0714704b76b543396e579c022a0c9
SHA512
41d31c1bf999867b1fa7e2edaef55575242a0bccbd73b6de422f486b9e6d2d3f427e240beb803da225eb90e9feb6520e304850942bd0523921e42fbbabe0a4aa
SSDEEP
3072:Kr2CytLr2CytLr2CytLr2CytLr2CytLr2CytLr2Cyt:HCBCBCBCBCBCBC
Checks for missing Authenticode signature.
resource |
---|
49ebdc7b10d2934af3a298014ac4497d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ