Always
ConfigAd
GetADpop
GetPlayerVersion
HKbolo
HashAd
PlayAb
PrioritPutAd
PutTestSpecial
SetAdOnbk
StandYourad
adefee
heyllow
msnpop
qqadpop
sasa
Static task
static1
Behavioral task
behavioral1
Sample
f56ba70efbf31d0a70788f4f9be95cb9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f56ba70efbf31d0a70788f4f9be95cb9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f56ba70efbf31d0a70788f4f9be95cb9_JaffaCakes118
Size
207KB
MD5
f56ba70efbf31d0a70788f4f9be95cb9
SHA1
bcc6a8d3e43371df0ce7ce11eda70cdb43e2a2a8
SHA256
f44dd95427f7e57bdcf58c8829e4065fa77bc39829c313cd6642ae7d5bbebb7d
SHA512
5d2bbec5d6a4917849f9e81ff25de47ef0bf4be1f3ab4ae994336405440ae53e098bf11a68149f47bb95f56ca444cdc6bf139d29efe3743e36a829387be48f92
SSDEEP
6144:heWrQf/6OHWZg+/aI2VUjQ97EFBhCdEgmQxC6IAAjIh:by/DHW/oSQ97sBhiEgmQxxzh
Checks for missing Authenticode signature.
resource |
---|
f56ba70efbf31d0a70788f4f9be95cb9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemFree
InternetOpenA
URLDownloadToFileA
PostMessageA
GetTextCharsetInfo
RegCloseKey
VarUI4FromStr
Always
ConfigAd
GetADpop
GetPlayerVersion
HKbolo
HashAd
PlayAb
PrioritPutAd
PutTestSpecial
SetAdOnbk
StandYourad
adefee
heyllow
msnpop
qqadpop
sasa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE