VSTPluginMain
main
Static task
static1
Behavioral task
behavioral1
Sample
41468a1614d566424c7e07a9e3140092_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
41468a1614d566424c7e07a9e3140092_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
41468a1614d566424c7e07a9e3140092_JaffaCakes118
Size
2.3MB
MD5
41468a1614d566424c7e07a9e3140092
SHA1
4e0198d8ffe71cfa1f1d96d76f441e17b9f59d35
SHA256
b7bc2351b03a2abf8e4dc9a16d0e189feb4f4390ab3e0388121021c64a7111d1
SHA512
88cabd1b7f8acfd456d2878be9e962063ad510857f6d745f045242df2d612c352b39f19024ce51d7913e2eb53504efb4430f8d5cfcc6a806cb6c85a6f8abe2cb
SSDEEP
49152:48trXE8+8hLmTWLqTmbR09ga3/P86K5RlpCvMZkOwFHNZynMlMc:vnNRHuKa3/P8TjloEIFtZn
Checks for missing Authenticode signature.
resource |
---|
41468a1614d566424c7e07a9e3140092_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RevokeDragDrop
GetParent
DragQueryFileA
GdipCreatePath
CreateSolidBrush
RtlUnwind
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetAdaptersInfo
CryptReleaseContext
VSTPluginMain
main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ