DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
72fe02584591f5397bcefca8d2a46830_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72fe02584591f5397bcefca8d2a46830_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
72fe02584591f5397bcefca8d2a46830_JaffaCakes118
Size
32KB
MD5
72fe02584591f5397bcefca8d2a46830
SHA1
617fd9e2490fece05c02a638efad8a4b81874d23
SHA256
aaeac9e3456d6777f7f730628764eb53456670661604870e045a59d92bdee376
SHA512
eb2ca137dd656b4b9d5bd50745df1c2b293f8572b183bebe422494a879bb1bffe30c29dd9c5a645e22e4335b2fd12ae9f850a915afd202cc23c6464e60ee982a
SSDEEP
768:F+ThI7GY40wQgYLhIcBE7V0PKxYswlZiQ+:F2hA40zgaBCSyyZl+
Checks for missing Authenticode signature.
resource |
---|
72fe02584591f5397bcefca8d2a46830_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ