Always
ConfigAd
GetADpop
GetPlayerVersion
HKbolo
HashAd
PlayAb
PrioritPutAd
PutTestSpecial
SetAdOnbk
StandYourad
adefee
heyllow
msnpop
qqadpop
sasa
Static task
static1
Behavioral task
behavioral1
Sample
61d9342d5c52ba7806ce095d76a36a2a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61d9342d5c52ba7806ce095d76a36a2a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
61d9342d5c52ba7806ce095d76a36a2a_JaffaCakes118
Size
184KB
MD5
61d9342d5c52ba7806ce095d76a36a2a
SHA1
880231ba77dae11af6436b19d67174d0f985bbaa
SHA256
ce250370e05b15b90599e9943932982f71e6c45332ac52f73ccbc4796d88df0e
SHA512
16727daa2934d7c9c13cfc44b886212e3494f90a04605eca58a8cfb21caea8ac8c765078ad43fc4e0655e1e5627de11c2472cc9467dec55baa72eeec6b4e8093
SSDEEP
3072:kEOXiBrCGoaZhdI4cUkuwQ0H8w65yGUREnDEkT98cUjBQoB5P2Vu:m4CxaZrIhU7wQ0H8NUGUREnokhZKQo3J
Checks for missing Authenticode signature.
resource |
---|
61d9342d5c52ba7806ce095d76a36a2a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemFree
InternetOpenA
URLDownloadToFileA
PostMessageA
GetTextCharsetInfo
RegCloseKey
VarUI4FromStr
Always
ConfigAd
GetADpop
GetPlayerVersion
HKbolo
HashAd
PlayAb
PrioritPutAd
PutTestSpecial
SetAdOnbk
StandYourad
adefee
heyllow
msnpop
qqadpop
sasa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE