VSTPluginMain
main
Static task
static1
Behavioral task
behavioral1
Sample
3cc4b55b9af6ca170ba141a20060b0be_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3cc4b55b9af6ca170ba141a20060b0be_JaffaCakes118
Size
2.8MB
MD5
3cc4b55b9af6ca170ba141a20060b0be
SHA1
a178c2bc4b14d604bb0a3a09b04b8675949c3938
SHA256
bcd1b6c4b19e81d950badaa3b0cdf8b725508e7037e3c82538ea991b61b98b09
SHA512
7b6bdf8b443ffde006d564aa32942656dd3f07d9c0ed33b1cc2822fec7fa59e5374a195f55afc9b89e1b2c00c0ebceb10031235c542271f8bdbd081ccfcc9640
SSDEEP
49152:RxD0OgJoBqeGJDuScCzzDhYstgtrHFtqLrZgFwUxwqb1mVtlgyp8:z0OgJWGU9CzK8gtbFtqvZuwUSqZmVfn8
Checks for missing Authenticode signature.
resource |
---|
3cc4b55b9af6ca170ba141a20060b0be_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpy
InterlockedExchange
IsWindowEnabled
CLSIDFromString
GetFileVersionInfoSizeW
_TrackMouseEvent
GdipDeletePath
SetBkColor
GetOpenFileNameW
GetUserNameW
SHGetPathFromIDListW
VSTPluginMain
main
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE