Always
ConfigAd
GetADpop
GetPlayerVersion
HKbolo
HashAd
PlayAb
PrioritPutAd
PutTestSpecial
SetAdOnbk
StandYourad
adefee
heyllow
msnpop
qqadpop
sasa
Static task
static1
Behavioral task
behavioral1
Sample
f137ab52856663abe0b423ff34227d53_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f137ab52856663abe0b423ff34227d53_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f137ab52856663abe0b423ff34227d53_JaffaCakes118
Size
194KB
MD5
f137ab52856663abe0b423ff34227d53
SHA1
541307cd17dc42be88b8e8e9782a35b1bb101ebd
SHA256
774fed81effd500d714b596fd20d79b065a9036c185b5e9986ca9a516a930fa9
SHA512
d94715643b7aec48e74ffbe8d39eb96c4555b9e34fd62f9f830a247c0534f4d0b785f2e5b04a1e408dc318ce6566f55549a4aee7a007f5d44fe77b7cf7d78314
SSDEEP
6144:qpmVu+5sb0ZTKcUghCETIbxeSXewdOfSK1:qpou+5sb0ZgUfIbxeSZdOfv
Checks for missing Authenticode signature.
resource |
---|
f137ab52856663abe0b423ff34227d53_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemFree
InternetOpenA
URLDownloadToFileA
PostMessageA
GetTextCharsetInfo
RegCloseKey
VarUI4FromStr
Always
ConfigAd
GetADpop
GetPlayerVersion
HKbolo
HashAd
PlayAb
PrioritPutAd
PutTestSpecial
SetAdOnbk
StandYourad
adefee
heyllow
msnpop
qqadpop
sasa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE