Adh
Always
ConfigCast
GetPlayerVersion
HaahSBd
IJHEHd
PlayA
PrioritSetAd
PutAdSpecial
PutAdsware
SetAdrkOn
StandupYoured
UPAdInfo
adee
jlkjde
plkeAq
Static task
static1
Behavioral task
behavioral1
Sample
p.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
p.dll
Resource
win10v2004-20240802-en
Target
a2e4807b704da9a826f456d66b1dfcec_JaffaCakes118
Size
168KB
MD5
a2e4807b704da9a826f456d66b1dfcec
SHA1
67c99a4e50d0d591a53240826703035910869126
SHA256
99211458555462b46c2bf596f66ec9bb3560e425bae31baae490b6bc51417f88
SHA512
db5c7d14b324633267d242d4c9d5a9cdb11a8a184404103fc490d742c875c1779f4437c62b10fe525057b4f658c1edea3d563f0ba1ac40d01347c69aa0bec169
SSDEEP
3072:36Xa1x4f83SmodRRAFDiVC5cmCdh35KHB6HVTOrbRqLMCbdOKpgLvTs:36XHELpiVCc9335KMHJOXRqLMiIKpww
Checks for missing Authenticode signature.
resource |
---|
unpack001/p.dll.zgx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemFree
InternetCrackUrlA
URLDownloadToFileA
AdjustWindowRectEx
CreateSolidBrush
InitializeSecurityDescriptor
VarUI4FromStr
Adh
Always
ConfigCast
GetPlayerVersion
HaahSBd
IJHEHd
PlayA
PrioritSetAd
PutAdSpecial
PutAdsware
SetAdrkOn
StandupYoured
UPAdInfo
adee
jlkjde
plkeAq
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE