Always
GetPlayerVersion
opAD
playAdh
Static task
static1
Behavioral task
behavioral1
Sample
4afca0a26a2f85bee4ae473056edc045_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4afca0a26a2f85bee4ae473056edc045_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4afca0a26a2f85bee4ae473056edc045_JaffaCakes118
Size
520KB
MD5
4afca0a26a2f85bee4ae473056edc045
SHA1
ead66087a0e2ef14e1413ef53aa85f0e5218f1bb
SHA256
08cd20103ac56d6841452171874649b624d02d3c992621c74a9d61b5a2f05961
SHA512
77f8684c1dc9f766d5411a3ea1c6520fe24ae77e4d2078d6246ee3e5d2c47d1484ae2bf299d45ec12e5e69e5f69df6bed85471b1854431fdc1e9850812b6485f
SSDEEP
12288:4lLavEnWQaE+6m8FIxeD5jNawKBCKb7zV58WcdIutOQFikHNFoOt5WY5M9h3dlFZ:4RCEn46HFieDFswKhzSdxtOQFioNFoOC
Checks for missing Authenticode signature.
resource |
---|
4afca0a26a2f85bee4ae473056edc045_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
gethostbyname
WSACleanup
WSAStartup
CoTaskMemRealloc
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
InternetOpenA
InternetReadFile
GetUrlCacheEntryInfoA
InternetCrackUrlA
DeleteUrlCacheEntry
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
URLDownloadToFileA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetLocalTime
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
ReleaseMutex
FlushViewOfFile
WaitForSingleObject
CreateMutexA
FindClose
FindFirstFileA
SetFileAttributesA
GetLastError
GetSystemTimeAsFileTime
SetErrorMode
MultiByteToWideChar
GetShortPathNameA
GetTempFileNameA
GetTempPathA
Sleep
CopyFileA
GetWindowsDirectoryA
SetFilePointer
GetBinaryTypeA
DeleteFileA
GetVolumeInformationA
GetSystemDirectoryA
FindNextFileA
lstrcmpA
lstrcatA
lstrcpyA
CreateDirectoryA
GetVersionExA
SetProcessWorkingSetSize
GetCurrentProcess
GetTickCount
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
HeapFree
GetProcessHeap
HeapAlloc
WideCharToMultiByte
InterlockedDecrement
lstrlenA
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenW
MulDiv
InterlockedIncrement
GetModuleFileNameA
GetPrivateProfileSectionA
GetModuleHandleA
FreeLibrary
SizeofResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetProcAddress
LoadLibraryA
CreateThread
SetEvent
OpenEventA
CreateProcessA
WaitForMultipleObjects
CreateEventA
Module32Next
Module32First
CreateToolhelp32Snapshot
GetCurrentDirectoryA
Process32Next
Process32First
ReadFile
CreateFileA
TerminateProcess
DeviceIoControl
VirtualAlloc
VirtualFree
WriteFile
SetEndOfFile
GetStdHandle
QueryPerformanceCounter
HeapSize
GetCurrentProcessId
SetUnhandledExceptionFilter
IsBadWritePtr
FlushFileBuffers
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetOEMCP
GetCPInfo
LCMapStringW
LCMapStringA
RemoveDirectoryA
GetCommandLineA
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualProtect
GetFileAttributesA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitProcess
RtlUnwind
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadReadPtr
IsBadCodePtr
GetTimeZoneInformation
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalFree
LoadResource
GetFullPathNameA
GetForegroundWindow
SetForegroundWindow
SystemParametersInfoA
MapWindowPoints
ShowWindow
UpdateWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
EnumWindows
AdjustWindowRectEx
FindWindowExA
PostMessageA
CreateAcceleratorTableA
CharNextA
GetParent
GetClassNameA
RedrawWindow
GetDlgItem
IsWindow
DestroyAcceleratorTable
GetFocus
IsChild
GetWindow
SetFocus
BeginPaint
EndPaint
GetDesktopWindow
InvalidateRgn
InvalidateRect
FillRect
SetCapture
ReleaseCapture
GetSysColor
CreateWindowExA
CallWindowProcA
RegisterWindowMessageA
RegisterClassExA
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
SetActiveWindow
LoadCursorA
GetClassInfoExA
KillTimer
SetTimer
SetWindowPos
MoveWindow
SetWindowTextA
SendMessageA
GetWindowLongA
SetWindowLongA
DestroyWindow
PostQuitMessage
wsprintfA
SetWindowRgn
ReleaseDC
GetDC
GetClientRect
GetSystemMetrics
LoadImageA
UnregisterClassA
GetWindowRect
CreateRectRgn
GetPixel
RestoreDC
CreateSolidBrush
GetStockObject
GetObjectA
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
DeleteDC
SelectObject
CreateCompatibleDC
CombineRgn
SaveDC
DeleteObject
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyA
GetUserNameA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
SysAllocString
SysFreeString
SysStringLen
VariantClear
SysStringByteLen
OleCreateFontIndirect
VariantInit
LoadRegTypeLi
LoadTypeLi
DispCallFunc
VarUI4FromStr
SysAllocStringLen
Always
GetPlayerVersion
opAD
playAdh
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ