Always
CallByControl
Downing
GetPlayerVersion
KingS
Stop
playAds
Static task
static1
Behavioral task
behavioral1
Sample
2e1f5fb962861e30d86fc251ef3d765d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e1f5fb962861e30d86fc251ef3d765d_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
2e1f5fb962861e30d86fc251ef3d765d_JaffaCakes118
Size
208KB
MD5
2e1f5fb962861e30d86fc251ef3d765d
SHA1
295a9dacbf5dcee765047b8cc9ee2a7092099d2c
SHA256
a0d40766eaed5fb4877b52e5981d83900635b23524a262f6b1f76e6814e5da1c
SHA512
6f684cf6e6a60a7d4658278ce6b767eb769f75eebf7f61300edfffc26657790d13e0c2605e5d23be42296b38dcde96fe9a87454cc13a9b1d9609a7fcbae5c39b
SSDEEP
3072:ngCuetZ1j2b4zV2JYky7kZIaCXRt0fMyL1DACTV1OX4BFyjid04r14Am:gveXh2C2JtZIacRi0qhTD7M4rC
Checks for missing Authenticode signature.
resource |
---|
2e1f5fb962861e30d86fc251ef3d765d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemRealloc
InternetOpenA
URLDownloadToFileA
GetForegroundWindow
GetPixel
RegOpenKeyA
SysAllocString
Always
CallByControl
Downing
GetPlayerVersion
KingS
Stop
playAds
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE