winampGetPMPDevicePlugin
winampUninstallPlugin
Static task
static1
Behavioral task
behavioral1
Sample
0a0c7558b89acb20802f2aba3f5bc1f0_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0a0c7558b89acb20802f2aba3f5bc1f0_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0a0c7558b89acb20802f2aba3f5bc1f0_JaffaCakes118
Size
253KB
MD5
0a0c7558b89acb20802f2aba3f5bc1f0
SHA1
ecc427f1af9b38d5a7f0e35cc9bea47c152877a5
SHA256
4802deb68fc3a6a5f57ad55dd17e180fe51df115d44243c58cfe11989eba0fb3
SHA512
391feb75b7823b74b00417fd2a5e3f94cc699709c115def480271f21a167113b1b31d22b72b19d58402afd08dae20d3b21998d74cdd65c92815f10ee92d0549d
SSDEEP
6144:uLgxmvLlcDUAtFJyNKFXnSuHAvKxizCTQiZDamzYODpP4ib2Bj:usxmvLlYUAtnyNKFXxAvFzCnZvVzaR
Checks for missing Authenticode signature.
resource |
---|
0a0c7558b89acb20802f2aba3f5bc1f0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CreateFileW
GetDriveTypeW
CloseHandle
Sleep
DeviceIoControl
lstrlenW
lstrcpynW
lstrcmpiW
WideCharToMultiByte
MultiByteToWideChar
LockFile
CreateFileA
UnlockFile
GetDiskFreeSpaceExW
FindClose
FindFirstFileW
SetVolumeLabelW
WriteFile
SetFilePointer
CreateDirectoryA
SetErrorMode
GetPrivateProfileIntW
CreateDirectoryW
OutputDebugStringW
GetFileAttributesW
DeleteFileW
WritePrivateProfileStringW
GetTickCount
GetVolumeInformationW
OutputDebugStringA
GetFileAttributesA
CreateThread
WaitForSingleObject
DisableThreadLibraryCalls
wsprintfW
CharNextW
SendMessageW
MessageBoxW
EndDialog
SetWindowPos
ShowWindow
SetTimer
SendDlgItemMessageW
SetDlgItemTextW
KillTimer
CheckDlgButton
GetDlgItem
wsprintfA
SendMessageA
EnableWindow
GetWindowLongW
BringWindowToTop
SetWindowLongW
GetDlgItemTextW
IsDlgButtonChecked
CoCreateGuid
?getBits@SkinBitmap@@UAEPAXXZ
??0SkinBitmap@@QAE@PAKHH_N@Z
??1SkinBitmap@@QAE@XZ
??1DCCanvas@@UAE@XZ
?stretch@SkinBitmap@@QAEXPAVifc_canvas@@HHHH@Z
??0DCCanvas@@QAE@PAUHDC__@@PAVBaseWnd@@@Z
??1BltCanvas@@UAE@XZ
?getBits@BltCanvas@@QAEPAXXZ
??0BltCanvas@@QAE@HHPAUHWND__@@H@Z
Init
Quit
_unlink
_wcsicmp
_wcsdup
_except_handler3
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
memmove
tolower
realloc
wcschr
fgetws
fprintf
difftime
srand
_wmkdir
memcmp
wcscat
wcscpy
wcscmp
_wtof
pow
rename
calloc
wcsrchr
_wtoi64
printf
_wunlink
fwrite
fread
fclose
ftell
fseek
_wfopen
memset
free
memcpy
malloc
_vsnwprintf
??3@YAXPAX@Z
wcslen
_strnicmp
??_V@YAXPAX@Z
??_U@YAPAXI@Z
__CxxFrameHandler
??2@YAPAXI@Z
rand
towupper
_purecall
wcsncpy
_wtoi
strlen
time
_wcsnicmp
log10
_timezone
_tzset
fopen
strtoul
strstr
winampGetPMPDevicePlugin
winampUninstallPlugin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ