Always
CallByControl
Downing
GetPlayerVersion
KingS
Stop
playAds
Static task
static1
Behavioral task
behavioral1
Sample
4575acdf88caf5af8368206ee1fad71e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4575acdf88caf5af8368206ee1fad71e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4575acdf88caf5af8368206ee1fad71e_JaffaCakes118
Size
208KB
MD5
4575acdf88caf5af8368206ee1fad71e
SHA1
457d404e01d0cbf51618694175faeebd8ce13622
SHA256
78e7ea334a111227dbf69b7a1650c4d7febdc9074961ad3b0302bbc9634b6c97
SHA512
5b1144be25f7906e0eb8a0e5fcaaf14f8618f8ed5e1e56cc93d6c311c1b472183a698c99b4a43e2c83cb6eee752a85a1cc3fff5faca6ea681666da8055e9e45b
SSDEEP
6144:GtPWsbDkDVBUXr3rB4sRwzmV7XwZPmO4QRivM2Uc00xyQE3e6A:GtPxHkDH8B4sRZlXwBjivXn9E3er
Checks for missing Authenticode signature.
resource |
---|
4575acdf88caf5af8368206ee1fad71e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemRealloc
InternetOpenA
URLDownloadToFileA
GetForegroundWindow
DeleteObject
RegOpenKeyA
SysAllocString
Always
CallByControl
Downing
GetPlayerVersion
KingS
Stop
playAds
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE