DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
a1b95e7927b02b658e9f66ab90f1f801_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a1b95e7927b02b658e9f66ab90f1f801_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a1b95e7927b02b658e9f66ab90f1f801_JaffaCakes118
Size
227KB
MD5
a1b95e7927b02b658e9f66ab90f1f801
SHA1
430f13d8d0cd671e89f1fded3eb6b7bc25a9c96c
SHA256
30083d7fe427db0ad2f0bea04de894e06ad09f07ad4013f6428dde7ea6f96459
SHA512
fa8812179c1a37920d5902a66d5d4d5acb07d676271a6d0b3fe884402fd6b6146cc30418662d70227ebf50aed3745eed796cfaf3740e106cf04e7b48fadce8fa
SSDEEP
6144:Bzi5y3zi5y3zi5y3zi5y3zi5y3zi5y3zi5y:
Checks for missing Authenticode signature.
resource |
---|
a1b95e7927b02b658e9f66ab90f1f801_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ