Always
CallByControl
GetPlayerVersion
Stop
playAds
Static task
static1
Behavioral task
behavioral1
Sample
c21254d186b9e48f2a734e864a5db3d8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c21254d186b9e48f2a734e864a5db3d8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c21254d186b9e48f2a734e864a5db3d8_JaffaCakes118
Size
1.1MB
MD5
c21254d186b9e48f2a734e864a5db3d8
SHA1
bba38ea43105195de0330cc2391665ba4809fdcc
SHA256
d015d17b5d5da74033c6101a5f2e2b971b0b576b34378a5e33d18e81f445b24c
SHA512
9fdb4af088287e81dd7a4c9355800da360dd4234a4f0db4ef87298657d39e42dec563fd54f69fac4832e9958101c011dbde77c3b6cd60f92ed7c9ba417523294
SSDEEP
12288:yTt8myHYYbf+xxkDtTul87rDC760ha17grW3xBMsn9YEoYUZ+h:yxCHYYT9JilkrD49hah3j6LYUZ
Checks for missing Authenticode signature.
resource |
---|
c21254d186b9e48f2a734e864a5db3d8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemRealloc
InternetOpenA
URLDownloadToFileA
GetForegroundWindow
CreateRectRgn
RegOpenKeyA
SysAllocString
Always
CallByControl
GetPlayerVersion
Stop
playAds
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE