Always
CallByControl
GetPlayerVersion
Stop
playAd
Static task
static1
Behavioral task
behavioral1
Sample
415d5cb2891b8f0205efa613cc52af63_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
415d5cb2891b8f0205efa613cc52af63_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
415d5cb2891b8f0205efa613cc52af63_JaffaCakes118
Size
213KB
MD5
415d5cb2891b8f0205efa613cc52af63
SHA1
dc4ae19fb5620745852e37616be4004a101a00de
SHA256
fb986e0e22df9fbb4f7b407f9fd16099f224d13ba4635145ee69aaae6f711381
SHA512
f6e5c0d93471c8cbf2f7fb2b5b3211688137707c6c5df105376392e89d60857cd34219a1f931b892d44eaa1efba46943e5fa6d1febbd70079176ed44d413b353
SSDEEP
6144:LDISFKE4nqm2Is7f15Q4pS7nI46mE8qtKRw:LDISkNSf15Q4pSE46mt1Rw
Checks for missing Authenticode signature.
resource |
---|
415d5cb2891b8f0205efa613cc52af63_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
WSACleanup
CoTaskMemFree
InternetCrackUrlA
URLDownloadToFileA
GetForegroundWindow
DeleteObject
RegDeleteKeyA
SHGetFolderPathA
SysAllocString
Always
CallByControl
GetPlayerVersion
Stop
playAd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE