DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
0fbd37a64ddf1b0f2b25342b50f5b2bb_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0fbd37a64ddf1b0f2b25342b50f5b2bb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0fbd37a64ddf1b0f2b25342b50f5b2bb_JaffaCakes118
Size
108KB
MD5
0fbd37a64ddf1b0f2b25342b50f5b2bb
SHA1
d85172ca315d664379e6f0508967076039e9ba1e
SHA256
e820c8b2d3811ff20756bd02a9a0ba43ec290ab65fb4606340d4053383724cec
SHA512
921da03eec76bb591fcb034f14175233d5162369da6b5eb26e16cb6ef404e97af5b708b42a97e3e15be4fadc2d691456db6bc4e2585dfb5fd7af2044e593b988
SSDEEP
1536:iE/OlgxKyQQoIQkE/OlgxKyQQoIQkE/OlgxKyQQoIQ:w3yQO3yQO3yQ
Checks for missing Authenticode signature.
resource |
---|
0fbd37a64ddf1b0f2b25342b50f5b2bb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ