DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
862ac99a993b99b68177aa527fa7afe8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
862ac99a993b99b68177aa527fa7afe8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
862ac99a993b99b68177aa527fa7afe8_JaffaCakes118
Size
227KB
MD5
862ac99a993b99b68177aa527fa7afe8
SHA1
ba71de0889cefa6917fc86f628a2b9f20bee17a8
SHA256
c422133e14458e6786043bd7fbc13e99a7400568580e30bc5a21c330c501ad9c
SHA512
fd7eb1c4892f95cabab9343413da6b3c5a15100e1539354b0403d053bc38e580378a0dba81ad46d44862d04484809471111e41a5bf7626be0111854c6fb793d5
SSDEEP
3072:EmCb2LSGmCb2LSGmCb2LSGmCb2LSGmCb2LSGmCb2LSGmCb2LS:qb2L1b2L1b2L1b2L1b2L1b2L1b2L
Checks for missing Authenticode signature.
resource |
---|
862ac99a993b99b68177aa527fa7afe8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ