DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
d0bd49d288c6929a39e70555f47bbd97_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0bd49d288c6929a39e70555f47bbd97_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d0bd49d288c6929a39e70555f47bbd97_JaffaCakes118
Size
224KB
MD5
d0bd49d288c6929a39e70555f47bbd97
SHA1
4f1156619d636b8419a41d7c806900922cd0459e
SHA256
5f2c0ea1a678704df7ec1047abb600a23e90a7ddfbabc87cbd72022a1a0aa2c0
SHA512
b59001c5fec75ccbbf570a33ee760eaed82ef5ab42c411b71eb81c45015b4c79b35704459885ffcd5f406fc08be0f2acca3658a395261190d5bb50e269cc9a68
SSDEEP
3072:iVIcsGiYVIcsGiYVIcsGiYVIcsGiYVIcsGiYVIcsGiYVIcsGi:iqcjNqcjNqcjNqcjNqcjNqcjNqcj
Checks for missing Authenticode signature.
resource |
---|
d0bd49d288c6929a39e70555f47bbd97_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ