DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
2c5628e376ec16347d671f684485f9e5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c5628e376ec16347d671f684485f9e5_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2c5628e376ec16347d671f684485f9e5_JaffaCakes118
Size
186KB
MD5
2c5628e376ec16347d671f684485f9e5
SHA1
548132f885e9cc6b3687e2c9a240b256ca318075
SHA256
1e4133357492324afef3834bc0f17b9a5e71d6b671c8066c9d488a29100be207
SHA512
23b088a8c7172f0900f3a5f99f40cb1b6ee6749d733a86410e1239e8ec0f65dda0b4b6e51aa09e1e408d21528d37e1e2356df31cf2d79cadc7d04f06d8135424
SSDEEP
384:gNNe06t9hcPPwDrLFazzBzk3jPw751GQ94bMgMB4ioiF5Q8WIHWPVY0:YeP9hjARkzPw7PHCbMg44cFWw0+
Checks for missing Authenticode signature.
resource |
---|
2c5628e376ec16347d671f684485f9e5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ