Always
ConfigCast
GetFIE
GetPlayerVersion
PrioritSetAd
PutAdSpecial
PutAdsware
SetAdrkOn
playAdh
Static task
static1
Behavioral task
behavioral1
Sample
a52578a014f233a9d27738e273fbdfe9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a52578a014f233a9d27738e273fbdfe9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a52578a014f233a9d27738e273fbdfe9_JaffaCakes118
Size
388KB
MD5
a52578a014f233a9d27738e273fbdfe9
SHA1
59c77d8f19af5ec35d0ff66fc8e3289ce6109383
SHA256
31d5d75dbcf0f0e367d3c5c85207fcb3cb8d1cd0a733ae98acb6d35cc7121e87
SHA512
06f62057161b930d5ef1ba3ec3fb9d6d75e663dda0dc4335e16a78470de096994c702639e13f98b11bae1e7bc886ba01137697bf717e3eb034981574be8c7ada
SSDEEP
12288:I2+qdprfUisdA7WAucG+GEf7MjsVaDOZFfKhPppRRcW0S1+I/QoSpu:I2jdJfUism6EoEzW8aDOLChhvRn0SZo4
Checks for missing Authenticode signature.
resource |
---|
a52578a014f233a9d27738e273fbdfe9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
gethostbyname
WSACleanup
WSAStartup
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemRealloc
InternetCrackUrlA
InternetReadFile
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
GetUrlCacheEntryInfoA
DeleteUrlCacheEntry
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
URLDownloadToFileA
DeleteCriticalSection
GetLocalTime
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
CloseHandle
UnmapViewOfFile
ReleaseMutex
FlushViewOfFile
WaitForSingleObject
CreateMutexA
FindClose
FindFirstFileA
GetCurrentDirectoryA
CopyFileA
CreateDirectoryA
GetFileType
SetFileAttributesA
GetLastError
GetSystemTimeAsFileTime
SetErrorMode
GetLogicalDrives
GetDiskFreeSpaceExA
SetFilePointer
GetBinaryTypeA
GetFullPathNameA
QueryDosDeviceA
GetPrivateProfileSectionA
MultiByteToWideChar
GetShortPathNameA
GetTempFileNameA
GetTempPathA
Sleep
GetWindowsDirectoryA
DeleteFileA
GetVolumeInformationA
GetSystemDirectoryA
FindNextFileA
lstrcmpA
lstrcatA
lstrcpyA
GetVersionExA
SetProcessWorkingSetSize
GetCurrentProcess
GetTickCount
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
HeapFree
GetProcessHeap
HeapAlloc
WideCharToMultiByte
InterlockedDecrement
lstrlenA
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenW
MulDiv
InitializeCriticalSection
GetModuleFileNameA
GetModuleHandleA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetProcAddress
LoadLibraryA
CreateThread
SetEvent
OpenEventA
CreateProcessA
WaitForMultipleObjects
CreateEventA
Module32Next
Module32First
CreateToolhelp32Snapshot
Process32Next
Process32First
ReadFile
CreateFileA
TerminateProcess
DeviceIoControl
VirtualAlloc
VirtualFree
WriteFile
SetEndOfFile
GetStdHandle
QueryPerformanceCounter
RaiseException
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetOEMCP
GetCPInfo
LCMapStringW
LCMapStringA
RemoveDirectoryA
GetCommandLineA
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualProtect
GetFileAttributesA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitProcess
RtlUnwind
SetUnhandledExceptionFilter
GetCurrentProcessId
HeapSize
FlushFileBuffers
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadReadPtr
IsBadCodePtr
GetTimeZoneInformation
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalFree
InterlockedIncrement
IsBadWritePtr
GetForegroundWindow
SetForegroundWindow
SystemParametersInfoA
MapWindowPoints
ShowWindow
UpdateWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
EnumWindows
AdjustWindowRectEx
FindWindowExA
PostMessageA
CreateAcceleratorTableA
CharNextA
GetParent
GetClassNameA
RedrawWindow
GetDlgItem
IsWindow
DestroyAcceleratorTable
GetFocus
IsChild
GetWindow
SetFocus
BeginPaint
EndPaint
GetDesktopWindow
InvalidateRgn
InvalidateRect
FillRect
SetCapture
ReleaseCapture
GetSysColor
CreateWindowExA
CallWindowProcA
RegisterWindowMessageA
RegisterClassExA
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
SetActiveWindow
LoadCursorA
GetClassInfoExA
KillTimer
SetTimer
SetWindowPos
MoveWindow
SetWindowTextA
SendMessageA
GetWindowLongA
SetWindowLongA
DestroyWindow
PostQuitMessage
wsprintfA
SetWindowRgn
ReleaseDC
GetDC
GetWindowRect
GetClientRect
GetSystemMetrics
LoadImageA
UnregisterClassA
CreateRectRgn
GetPixel
RestoreDC
CreateSolidBrush
GetStockObject
GetObjectA
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
DeleteDC
SelectObject
CreateCompatibleDC
CombineRgn
SaveDC
DeleteObject
RegCloseKey
RegSetKeySecurity
InitializeSecurityDescriptor
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegGetKeySecurity
GetUserNameA
RegCreateKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegQueryValueA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegEnumKeyExA
SetSecurityDescriptorDacl
RegNotifyChangeKeyValue
SysAllocString
SysFreeString
SysStringLen
VariantClear
SysStringByteLen
OleCreateFontIndirect
VariantInit
LoadRegTypeLi
LoadTypeLi
DispCallFunc
VarUI4FromStr
SysAllocStringLen
Always
ConfigCast
GetFIE
GetPlayerVersion
PrioritSetAd
PutAdSpecial
PutAdsware
SetAdrkOn
playAdh
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ