Always
ConfigAd
GetADpop
GetPlayerVersion
HKbolo
HashAd
PlayAb
PrioritPutAd
PutTestSpecial
SetAdOnbk
StandYourad
adefee
heyllow
msnpop
qqadpop
sasa
Static task
static1
Behavioral task
behavioral1
Sample
2ee3d7c64ab79f8fd98708394d596705_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ee3d7c64ab79f8fd98708394d596705_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2ee3d7c64ab79f8fd98708394d596705_JaffaCakes118
Size
178KB
MD5
2ee3d7c64ab79f8fd98708394d596705
SHA1
773224327f66581ddfcbca20add5fafef7cb2ae2
SHA256
d3cd58ccf47d38f4650338532492d084aa3d86e1d6889325573080b78bea9b1a
SHA512
271eebc44a404513ac9eeace0687a5d245c33e1ca0035a5fb2275ad9a6e8f145777225064f9b913e8747ae61277af965a61959af31e1e09c418e4616947f5d27
SSDEEP
3072:gZrp0IMa/Kt9SGVuK0kbJ8khHjdj19pi1Gb1BVIqIgCwKdBkgLHk7Oz9Ayzvn1:gZr9s9tVueN90SJ987LHkM9vN
Checks for missing Authenticode signature.
resource |
---|
2ee3d7c64ab79f8fd98708394d596705_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gethostbyname
CoTaskMemFree
InternetOpenA
URLDownloadToFileA
PostMessageA
GetTextCharsetInfo
RegCloseKey
VarUI4FromStr
Always
ConfigAd
GetADpop
GetPlayerVersion
HKbolo
HashAd
PlayAb
PrioritPutAd
PutTestSpecial
SetAdOnbk
StandYourad
adefee
heyllow
msnpop
qqadpop
sasa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE