extractall
extractfile
Overview
overview
7Static
static
330141fceb0...18.exe
windows7-x64
730141fceb0...18.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3content/Go...ws.htm
windows7-x64
3content/Go...ws.htm
windows10-2004-x64
3content/js/install.js
windows7-x64
3content/js/install.js
windows10-2004-x64
3content/js...ner.js
windows7-x64
3content/js...ner.js
windows10-2004-x64
3content/js...ver.js
windows7-x64
3content/js...ver.js
windows10-2004-x64
3content/js...ver.js
windows7-x64
3content/js...ver.js
windows10-2004-x64
3content/js...ode.js
windows7-x64
3content/js...ode.js
windows10-2004-x64
3content/js/overlay.js
windows7-x64
3content/js/overlay.js
windows10-2004-x64
3content/js/popup.js
windows7-x64
3content/js/popup.js
windows10-2004-x64
3content/js...ger.js
windows7-x64
3content/js...ger.js
windows10-2004-x64
3content/js...ger.js
windows7-x64
3content/js...ger.js
windows10-2004-x64
3content/js...der.js
windows7-x64
3content/js...der.js
windows10-2004-x64
3content/js...der.js
windows7-x64
3content/js...der.js
windows10-2004-x64
3content/js...ger.js
windows7-x64
3content/js...ger.js
windows10-2004-x64
3content/js...ger.js
windows7-x64
3content/js...ger.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
30141fceb000208ce13377197d52fc7d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30141fceb000208ce13377197d52fc7d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ZipDLL.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ZipDLL.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
content/GoogleNews.htm
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
content/GoogleNews.htm
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
content/js/install.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
content/js/install.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
content/js/listeners/httpListener.js
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
content/js/listeners/httpListener.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
content/js/listeners/prefsObserver.js
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
content/js/listeners/prefsObserver.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
content/js/listeners/uninstallObserver.js
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
content/js/listeners/uninstallObserver.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
content/js/miniMode.js
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
content/js/miniMode.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
content/js/overlay.js
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
content/js/overlay.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
content/js/popup.js
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
content/js/popup.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
content/js/relatedsites/advertisementManager.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
content/js/relatedsites/advertisementManager.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
content/js/relatedsites/datalayer/dataLayerManager.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
content/js/relatedsites/datalayer/dataLayerManager.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
content/js/relatedsites/datalayer/localDatabaseDataProvider.js
Resource
win7-20241010-en
Behavioral task
behavioral26
Sample
content/js/relatedsites/datalayer/localDatabaseDataProvider.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
content/js/relatedsites/datalayer/serverDataProvider.js
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
content/js/relatedsites/datalayer/serverDataProvider.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
content/js/relatedsites/relatedSitesManager.js
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
content/js/relatedsites/relatedSitesManager.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
content/js/relatedsites/userSuggestionManager.js
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
content/js/relatedsites/userSuggestionManager.js
Resource
win10v2004-20241007-en
Target
30141fceb000208ce13377197d52fc7d_JaffaCakes118
Size
571KB
MD5
30141fceb000208ce13377197d52fc7d
SHA1
338462bfbe6f7f4504216900199fe1ae6ba5ccb5
SHA256
71fb7d9845ce29f9f08043f8c8950b6b298dafdc1837127214059aa03df33f6b
SHA512
757f9057a2e6cf8a921d6ac6652db089d3a682b133af31b64594693393452630b030bb2f3d4c8ace3112c4ba25783b537e5ca92a9129db35818b7eda1adb4b62
SSDEEP
12288:7cKUZNJushhjROa0ztxTU7vLbYj282bzD9VpScQLfc8vy4h/:75sJus/jROdU7jbYJgD9Tyo86k
Checks for missing Authenticode signature.
resource |
---|
30141fceb000208ce13377197d52fc7d_JaffaCakes118 |
unpack001/$PLUGINSDIR/ZipDLL.dll |
resource | yara_rule |
---|---|
sample | nsis_installer_1 |
sample | nsis_installer_2 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiA
GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
GetLocaleInfoW
LoadLibraryA
IsBadCodePtr
LocalFree
FormatMessageA
GetLastError
MapViewOfFile
CreateFileMappingA
CloseHandle
UnmapViewOfFile
GetDiskFreeSpaceA
CreateFileA
GetCurrentDirectoryA
SetFileAttributesA
GetFileAttributesA
GetDriveTypeA
SetVolumeLabelA
DeleteFileA
MoveFileA
CreateDirectoryA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetEnvironmentVariableA
SetCurrentDirectoryA
GetFileType
FlushFileBuffers
SetStdHandle
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetEndOfFile
ReadFile
SetFilePointer
GetACP
GetOEMCP
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetProcAddress
GetStringTypeA
GetStringTypeW
IsBadReadPtr
SendMessageA
GetDlgItem
SetWindowTextA
FindWindowExA
OemToCharBuffA
CharToOemBuffA
extractall
extractfile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ