Always
CallByControl
GetPlayerVersion
Stop
playAds
Static task
static1
Behavioral task
behavioral1
Sample
b1ba1b28e6302847c2867143e9fb609b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b1ba1b28e6302847c2867143e9fb609b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b1ba1b28e6302847c2867143e9fb609b_JaffaCakes118
Size
208KB
MD5
b1ba1b28e6302847c2867143e9fb609b
SHA1
9256246584488df86f4600398c3a22eaa6199879
SHA256
cf57ea45d358ef7ffbd314ccb915fdeb4ecf7c4e0f2ed4640f479956414e0cdb
SHA512
44b8550e38235a101af17271fc0f6d88091779efcaacf89c47730d95bf66f898a992511d6ee6776890a984e4621435a374874b7826902db0a56d4b3031805aff
SSDEEP
6144:Wimk1XMGkHh7Ygg+egF/QPhC7SM2Z+3NQJ:b8GkHhEdYUh0SMe6QJ
Checks for missing Authenticode signature.
resource |
---|
b1ba1b28e6302847c2867143e9fb609b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemRealloc
InternetOpenA
URLDownloadToFileA
GetForegroundWindow
CreateRectRgn
RegOpenKeyA
ExtractAssociatedIconA
SysAllocString
Always
CallByControl
GetPlayerVersion
Stop
playAds
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE