Always
CallByControl
Downing
GetPlayerVersion
KingS
Stop
playAds
Static task
static1
Behavioral task
behavioral1
Sample
311900bd732ce7936b32eaf1de4f78a9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
311900bd732ce7936b32eaf1de4f78a9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
311900bd732ce7936b32eaf1de4f78a9_JaffaCakes118
Size
208KB
MD5
311900bd732ce7936b32eaf1de4f78a9
SHA1
23dfc7be874961e305cdb8436f14f7d29ffe7bac
SHA256
6375464517887c5442b7ce1b1427be7dfd9eafbbce475fc4094c693b468fe6ed
SHA512
f7f2c7f6cc92261e6e4c447e5b5cb8a0f3128ff6e7337c3c0daaeb7c985a24e3a629970b5ac1492834fbef65a9eddeb57e2526aa6f1fdbcbf44ca3cabcd7f808
SSDEEP
3072:pjawwwJgc2C9Q6ODYF+jUh6IVL2z3mQ74DZ9ZnXX7Nsr/ka272mlv1jo2G3ht1vS:pxg3Y1qTmQgFn7Nyu72U1U2GDRqaDOJ
Checks for missing Authenticode signature.
resource |
---|
311900bd732ce7936b32eaf1de4f78a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemRealloc
InternetOpenA
URLDownloadToFileA
GetForegroundWindow
DeleteObject
RegOpenKeyA
SysAllocString
Always
CallByControl
Downing
GetPlayerVersion
KingS
Stop
playAds
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE