DllCanUnloadNow
DllGetClassObject
Macpklo
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b6c69187e49513d7cbdd3fdd7c87b3bb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b6c69187e49513d7cbdd3fdd7c87b3bb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b6c69187e49513d7cbdd3fdd7c87b3bb_JaffaCakes118
Size
100KB
MD5
b6c69187e49513d7cbdd3fdd7c87b3bb
SHA1
642496b7927e268afd3e29caaad4eca9a2b53755
SHA256
bce72b54146ed9beb9c94d6f24d35d07e8d2c67632904d6080bde78b1603446e
SHA512
b0dfee4ce2adfd8ca897302bf13550c3b7d0497e5c4aea781826e3a9580716fba81ae09c327641e36870e22b33b03ebddf1caddb18bc64b41be047d2b4f1e05b
SSDEEP
3072:1rY+wymciMvmyAvQ2RaULYXxumn1/hAzhXyp/+hit:rOHrQ2Ra11BSz5jh
Checks for missing Authenticode signature.
resource |
---|
b6c69187e49513d7cbdd3fdd7c87b3bb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RtlUnwind
GetDiskFreeSpaceExA
GetProcAddress
RegisterConsoleVDM
EnumResourceTypesA
LoadLibraryExA
GetDriveTypeW
CreateMutexW
QueryPerformanceFrequency
FreeSid
SysFreeString
wvsprintfA
DllCanUnloadNow
DllGetClassObject
Macpklo
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ