Always
CallByControl
GetPlayerVersion
HxcDown
HxcUpdate
RunAD
Stop
playAdh
Static task
static1
Behavioral task
behavioral1
Sample
d5e47d2f1306ef25a76d3274adde291e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5e47d2f1306ef25a76d3274adde291e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d5e47d2f1306ef25a76d3274adde291e_JaffaCakes118
Size
208KB
MD5
d5e47d2f1306ef25a76d3274adde291e
SHA1
54ff4c507f0ef1016ceb94bca6ad6d7acfc09c6d
SHA256
79cd4000f2afb7fadfa9ebd13fa78a568a226c6e58ab91afea3f9e9e6e559904
SHA512
1a977b1128d3d57102d0cc52e041ec000ef1bb89f3f84cdc3cd8a3096998a8e95604ce0130100062c54b738817763c8fd69567ee3eeac2768ebdb00cc5ef9ae7
SSDEEP
3072:ZpX423572WUNy+I2Njik0+vJb9peXiB/5JmpDUt9gTQItk9+lxrgXEUPlqFD6bV6:L42p72U2Nji2xfeXiBmqtHsxrgXNe8
Checks for missing Authenticode signature.
resource |
---|
d5e47d2f1306ef25a76d3274adde291e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemRealloc
InternetOpenA
URLDownloadToFileA
GetForegroundWindow
DeleteObject
RegOpenKeyA
SysAllocString
Always
CallByControl
GetPlayerVersion
HxcDown
HxcUpdate
RunAD
Stop
playAdh
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE