DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
Static task
static1
Behavioral task
behavioral1
Sample
52d6a9c8842e2f535138e4bdc1f45fc3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52d6a9c8842e2f535138e4bdc1f45fc3_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
52d6a9c8842e2f535138e4bdc1f45fc3_JaffaCakes118
Size
94KB
MD5
52d6a9c8842e2f535138e4bdc1f45fc3
SHA1
47c529dcde6d7c4ca1d709fd54ca63343bb776ec
SHA256
d6e55af35a48881b44dd2607fc7016f6d906b3ce3fe86f1759d781c18521ba03
SHA512
90735d338bc72463a967612d4296ac377324b1df0c9a1379c24041b1877e5ce276e188fb7830104024ba454bb13d22c11e0e5515126ff6a7f48741f5c72f8da6
SSDEEP
1536:tkfAzs+bME4sIHkfAzs+bME4sIHkfAzs+bME4sI:xYiMEJI7YiMEJI7YiMEJI
Checks for missing Authenticode signature.
resource |
---|
52d6a9c8842e2f535138e4bdc1f45fc3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ