Always
CallByControl
FKingSoft
GetPlayerVersion
Stop
playAds
Static task
static1
Behavioral task
behavioral1
Sample
ce34a7eb22ec3f7d3129607209205c86_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ce34a7eb22ec3f7d3129607209205c86_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ce34a7eb22ec3f7d3129607209205c86_JaffaCakes118
Size
209KB
MD5
ce34a7eb22ec3f7d3129607209205c86
SHA1
ba0a832e1e63ed13558d2eb9584e4aa139acac94
SHA256
2abe722bc65cc91e18ab5fb4dc6c9e1c56cdd0fc74ddb91b3865ded799c122d5
SHA512
3b2b3eae8eff716e20f1140924480eed213355b9363a21ec498a86f0035e97472b3eeb887ef00e8cfb814991322120f8c709cd7175fc24d8eb3c124f35449afe
SSDEEP
3072:omV8fc0hY5X1KAt6AjJFpTV+f5ofZu67H5TLgoYOYS2K3CpflnbjUYdHuFqHAQ:Y3hYDD5J+xofIMH5IoY020gfR139
Checks for missing Authenticode signature.
resource |
---|
ce34a7eb22ec3f7d3129607209205c86_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemRealloc
InternetOpenA
URLDownloadToFileA
GetForegroundWindow
GetPixel
RegOpenKeyA
SysAllocString
Always
CallByControl
FKingSoft
GetPlayerVersion
Stop
playAds
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE