DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
82a16df04e9a766ff66e2825b95fa34a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
82a16df04e9a766ff66e2825b95fa34a_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
82a16df04e9a766ff66e2825b95fa34a_JaffaCakes118
Size
213KB
MD5
82a16df04e9a766ff66e2825b95fa34a
SHA1
0f2a731e9359146356e2737e5183c06d6ef86a50
SHA256
6cc9070fdbd9e33d5a8f3c74b88809a6e71b35dca9f6b95c9aa58c93d94e896c
SHA512
5a939715bb6655cc2087d3521b314ebd05d5dcb8d6c54f1f831bf92231f0d681e309e3de111fb14ec8ebdfb826905960ccd8e56020f237148ddc49efbff78fe7
SSDEEP
6144:jmVaiZ8mVaiZ8mVaiZ8mVaiZ8mVaiZ8mVaiZ8mVaiZ:SVhlVhlVhlVhlVhlVhlVh
Checks for missing Authenticode signature.
resource |
---|
82a16df04e9a766ff66e2825b95fa34a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ