Always
CallByControl
GetPlayerVersion
Stop
playAds
Static task
static1
Behavioral task
behavioral1
Sample
f6a78454e77ed7c67a675b5ea304ed51_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6a78454e77ed7c67a675b5ea304ed51_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f6a78454e77ed7c67a675b5ea304ed51_JaffaCakes118
Size
207KB
MD5
f6a78454e77ed7c67a675b5ea304ed51
SHA1
8dba0519a8b89b671705016010d4ef09a9446d57
SHA256
1d6dd3b2416eb626c3316e9e29b2f206159c1deb68aacee2ed5dce637820ae4d
SHA512
f3ab0dc2cd583b186cfae4ea0d57aead1821d1924ce10681e426a4f4ee20a51282f2a5563b2c2f0cf82bdd6c11a6bba9823a026e9a82d4d95ea2e982b2eab37e
SSDEEP
3072:nRQGQ9b/hVR2S/Cx2PrVJJ1yCIinh7YCcU2Ji8+Yi0PD5kgjLigY+xh7+Qrf6Fhu:nDQp/qxM7R7nhMxUmoSjLBYWiNFw
Checks for missing Authenticode signature.
resource |
---|
f6a78454e77ed7c67a675b5ea304ed51_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemRealloc
InternetOpenA
URLDownloadToFileA
GetForegroundWindow
RestoreDC
RegOpenKeyA
SysAllocString
Always
CallByControl
GetPlayerVersion
Stop
playAds
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE