DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
8388e603d95fc9fda760c7fbc38ec67b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8388e603d95fc9fda760c7fbc38ec67b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8388e603d95fc9fda760c7fbc38ec67b_JaffaCakes118
Size
31KB
MD5
8388e603d95fc9fda760c7fbc38ec67b
SHA1
f9e6497b3a0aff041231db5980e34c396cce2ef9
SHA256
d8bbd28df83251c265a684c74dbff05e0a5d5a640ac2e8cb9dd3a628f3ba03ce
SHA512
f08273ea3da723c6e5ea712323bef1d8232dc92bfff840888c9c87fdbb674a8691e47710e78f7c414144904d5700331b6a1be6b189f73c28c46c2e1a70f010ff
SSDEEP
384:RNNe06t9hcWVcqnu3A2/wzufKHZa59HaiKDTavg1U6BA02P8WIHNVeZPnOk:FeP9hEqu3hyuCkfHaiA096ayWwU
Checks for missing Authenticode signature.
resource |
---|
8388e603d95fc9fda760c7fbc38ec67b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ