DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
e23b8b5f8743361bf42ea3cd19ff0b34_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e23b8b5f8743361bf42ea3cd19ff0b34_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e23b8b5f8743361bf42ea3cd19ff0b34_JaffaCakes118
Size
36KB
MD5
e23b8b5f8743361bf42ea3cd19ff0b34
SHA1
c9e52c6b0fbb462b89a3d5a697e847cff97f57b3
SHA256
e6f275dd9719369d684a5163f50b521c4031e3842ed7eb016b578668e25fcb00
SHA512
3b0676d789d97e3cb81e5edbb62795a96e6329d6fb85013ad9e54e18c1e6e007ef9f94527292490014c9ae71d9896784c2bc6f4be89e10a4e3eeea77b93c0aed
SSDEEP
384:4d+k6d9hJyJDwYOpZ+kq2xvtckI2TqnohmFTEZIhjJy2AgAyaX6RCLY8WIH0LZnM:C+v9hcCaZkI6mFweY2GToCTWwMM
Checks for missing Authenticode signature.
resource |
---|
e23b8b5f8743361bf42ea3cd19ff0b34_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ