Always
CallByControl
FukFunc
GetPlayerVersion
Run
Start
Stop
playAda
Static task
static1
Behavioral task
behavioral1
Sample
66214e12a499f867d7e54fb1b0414c61_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66214e12a499f867d7e54fb1b0414c61_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
66214e12a499f867d7e54fb1b0414c61_JaffaCakes118
Size
219KB
MD5
66214e12a499f867d7e54fb1b0414c61
SHA1
9a8a27210f2c5e8430ac706073b1e7415c961406
SHA256
0245fc87b0e72068b4165607fabe4e1b017e9ba59e2013e7f60f21544d74a11a
SHA512
1f1f70a8b87812d857d50d2a5595906c255fb0657f44ea1d52f63a8f7653c0139e88386d071e8c3e3081fe8b048819e5b34cd5955ae26e4166c74de9cda7f5c1
SSDEEP
3072:4lQua7h6Kt5BEZsTSUPxROMPEQdWsOcFhx7AX3JS4RNE2NZ0M7+IbQzUP9DMX30:b6U56KzPxaurhx7AX1E4Z0k+IMolDh
Checks for missing Authenticode signature.
resource |
---|
66214e12a499f867d7e54fb1b0414c61_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
WSACleanup
CoTaskMemFree
InternetReadFile
URLDownloadToFileA
GetForegroundWindow
CreateCompatibleDC
RegCloseKey
SHGetFolderPathA
SysAllocString
Always
CallByControl
FukFunc
GetPlayerVersion
Run
Start
Stop
playAda
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE