winampGetPMPDevicePlugin
winampUninstallPlugin
Static task
static1
Behavioral task
behavioral1
Sample
15648649900ad53e99493c9b185fbfdc_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
15648649900ad53e99493c9b185fbfdc_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
15648649900ad53e99493c9b185fbfdc_JaffaCakes118
Size
176KB
MD5
15648649900ad53e99493c9b185fbfdc
SHA1
96097678eb8c238e62de48b7f76296c8489ff94d
SHA256
d162910df06c28f61b9252ec4190ae593559b7139aeb0609dd40a84babec540d
SHA512
a5389e61b19c070440649abe878bd760209c35741441ab810bd2166fa03e628c27352d8dbc61aeb59f211c81f5e56e4f81c294c8d61a10ac0affd1303366c1c1
SSDEEP
3072:EVfelkmizYjTQzG8kDgFmzDMOzjNTdpYKvAibqzdWPEAKkiSN:IfeamizCTQiZDamzYODpP4ib2B2
Checks for missing Authenticode signature.
resource |
---|
15648649900ad53e99493c9b185fbfdc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpynW
FindClose
FindFirstFileW
MultiByteToWideChar
WideCharToMultiByte
lstrcmpiW
WritePrivateProfileStringW
GetPrivateProfileStringW
TerminateThread
WaitForSingleObjectEx
CloseHandle
SetEvent
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateEventW
DisableThreadLibraryCalls
SetDlgItemTextW
wsprintfW
SendMessageW
GetDlgItemTextW
wsprintfA
CoUninitialize
CoInitializeEx
CoCreateInstance
SysFreeString
_wcsicmp
_wcsdup
_except_handler3
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
??3@YAXPAX@Z
free
wcstoul
memcmp
wcslen
_snwprintf
wcsrchr
wcscpy
malloc
wcscat
_purecall
wcscmp
??2@YAPAXI@Z
__CxxFrameHandler
strlen
_wunlink
fread
ftell
fseek
fclose
_wfopen
fwrite
memcpy
memmove
winampGetPMPDevicePlugin
winampUninstallPlugin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ