DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
166f6fd95ad5065cecbbcaf8d0e6dea4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
166f6fd95ad5065cecbbcaf8d0e6dea4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
166f6fd95ad5065cecbbcaf8d0e6dea4_JaffaCakes118
Size
31KB
MD5
166f6fd95ad5065cecbbcaf8d0e6dea4
SHA1
1bf494600da98d8dfcfa9765f257fdc2b7a849a9
SHA256
e73f7ab3cc3f038103cd382b809e81ca37479a51dcdd3c2b8fc311d88139e90d
SHA512
10428c8d1b670d3ea426d3b9fc7937711ca4db181a2cef690011f4612567ec817645f3ce554533553b80c9d405a39f65d58843f8b54aaddca20127b9c3e421a2
SSDEEP
384:RNNe06t9hcW1hQElMPF1o31ZO57pnR9C5LCvI9U6JsG7y8WIHLb5ZYjk:FeP9hzlgrhJbGL496pWwUY
Checks for missing Authenticode signature.
resource |
---|
166f6fd95ad5065cecbbcaf8d0e6dea4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ