Always
DownloadDLL
GetPlayerVersion
KingsStop
KingsUp
Stop
playAdk
Static task
static1
Behavioral task
behavioral1
Sample
c8e79562357b469eec866b67bf922f02_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8e79562357b469eec866b67bf922f02_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c8e79562357b469eec866b67bf922f02_JaffaCakes118
Size
211KB
MD5
c8e79562357b469eec866b67bf922f02
SHA1
c9e5147cc01a1708132d6b6ba7307d5aebca3cab
SHA256
d3085f9bf2b18decdb2eee310295c8e567d6267d58776dc93b0ece7cb899efce
SHA512
cf69ac357c3cf53d2c4b14087c158112899daea664d737ab737ac46b00db5de0c32120dccf1e957186f8632507f24ffd58b0e58f2ca821df834e6205efa74870
SSDEEP
6144:OUeG5F1Tynq1uWHHb0NoAgzlCbWky9N4n:OUH2q1uWbvxCbWD9c
Checks for missing Authenticode signature.
resource |
---|
c8e79562357b469eec866b67bf922f02_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
WSACleanup
CoTaskMemFree
InternetReadFile
URLDownloadToFileA
GetForegroundWindow
CombineRgn
RegQueryValueExA
SHGetFolderPathA
SysAllocString
Always
DownloadDLL
GetPlayerVersion
KingsStop
KingsUp
Stop
playAdk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE