a4d711b66daa11ff35e2013afc84f8a5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a4d711b66daa11ff35e2013afc84f8a5_JaffaCakes118
Size

506KB
MD5

a4d711b66daa11ff35e2013afc84f8a5
SHA1

097343a82c9f140e2d65cda634c125396966126f
SHA256

9cd1f2575002369d45fd5bdb828a38e656c616f5559f4116485b4639b8c54372
SHA512

124b3444a3e4e1c4a7a701f91e0915f7179e020b4f7f78b5bd30297abdc7d9f7ca3c58ee48fc76f2d8c53f4325aa758552dfdcb6eddf2f0d7feb0be90d49fc5d
SSDEEP

12288:UDEdAIHkxnzLlCYEmUKo0BHVpTrMnBdiewTvnI4w:sPIHkxnzLlCYEmX5fTrMsnLw

Score

1^/10

Malware Config

Signatures

Files

a4d711b66daa11ff35e2013afc84f8a5_JaffaCakes118
.dll windows:5 windows x86 arch:x86

9b73e90b04563664a3288e8cf2d485f4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:de:2f:9f:bf:7a:1d:41:91:f4:57:73:fa:11:3e:1d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

24/05/2013, 00:00

Not After

23/07/2015, 23:59

Subject

CN=Apple Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Apple Inc.,L=Cupertino,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:f2:3c:8c:19:6d:46:33:a0:92:14:63:54:d9:6d:90:d6:1e:fd:e7
Signer

Actual PE Digest

19:f2:3c:8c:19:6d:46:33:a0:92:14:63:54:d9:6d:90:d6:1e:fd:e7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BWA\CoreMedia-1562.22.2\srcroot\BuildResults\Release\CoreMedia.pdb

Imports

foundation

NSDeallocateObject

libdispatch

dispatch_get_current_queue
dispatch_get_specific
dispatch_queue_set_specific
dispatch_queue_get_specific
dispatch_get_global_queue
_dispatch_main_q
dispatch_once_f
dispatch_async_f
dispatch_source_testcancel
dispatch_source_set_timer
dispatch_retain
dispatch_time
dispatch_queue_create
dispatch_sync_f
dispatch_release

objc

object_getClass
objc_loadWeakRetained
objc_storeWeak

corefoundation

kCFRunLoopCommonModes
CFPreferencesCopyAppValue
CFStringCreateWithFormatAndArguments
CFPropertyListCreateWithStream
CFPreferencesCopyValue
CFAbsoluteTimeGetGregorianDate
CFURLCreateCopyDeletingLastPathComponent
kCFPreferencesAnyHost
CFPropertyListCreateWithData
CFURLCopyPath
CFURLHasDirectoryPath
CFDataGetBytePtr
CFArrayGetTypeID
CFStringAppendFormat
kCFTypeArrayCallBacks
_CFRuntimeCreateInstance
CFDataGetBytes
CFStringCompare
CFRelease
CFStringCreateFromExternalRepresentation
CFStringGetDoubleValue
CFDictionaryCreateMutable
CFDataGetTypeID
CFArrayContainsValue
CFArrayGetCount
CFStringFind
_CFRuntimeRegisterClass
CFStringCreateWithBytes
kCFAllocatorDefault
CFDictionaryCreate
CFGetTypeID
CFGetRetainCount
kCFTypeDictionaryValueCallBacks
CFStringCreateExternalRepresentation
CFStringGetLength
CFRetain
CFDictionaryGetValue
CFArrayGetValueAtIndex
CFURLCreateStringByAddingPercentEscapes
CFArrayAppendArray
kCFTypeDictionaryKeyCallBacks
CFArrayCreateCopy
CFArrayCreateMutable
CFNumberGetValue
CFDictionaryContainsKey
CFArrayAppendValue
CFStringGetTypeID
CFStringCreateWithCString
CFDataCreate
CFNumberCreate
CFDataGetLength
CFDataGetMutableBytePtr
__CFStringMakeConstantString
CFStringCreateWithSubstring
CFStringCreateWithFormat
CFDictionarySetValue
CFURLCreateStringByReplacingPercentEscapesUsingEncoding
CFNumberGetTypeID
CFDataSetLength
CFStringCreateMutable
CFDictionaryGetTypeID
CFArrayCreate
CFDataCreateMutable
CFStringGetBytes
CFGetAllocator
CFAllocatorAllocate
CFAllocatorDeallocate
CFDataCreateWithBytesNoCopy
kCFRunLoopDefaultMode
CFRunLoopRun
_CFRunLoopSetWindowsMessageQueueMask
CFRunLoopGetCurrent
kCFAllocatorNull
CFStringCreateWithCharacters
CFStringGetCString
CFURLCopyFileSystemPath
CFStringGetCharacters
CFDictionaryRemoveValue
CFDictionaryGetKeysAndValues
CFDictionaryGetCount
CFEqual
CFDictionaryAddValue
CFStringAppend
CFAllocatorGetDefault
CFDictionaryRemoveAllValues
kCFCopyStringDictionaryKeyCallBacks
CFDictionaryCreateCopy
CFDictionaryApplyFunction
CFArrayRemoveValueAtIndex
CFAllocatorCreate
CFDictionaryGetCountOfKey
CFSetAddValue
CFHash
CFSetGetCount
CFArrayInsertValueAtIndex
CFStringCreateCopy
kCFTypeSetCallBacks
CFSetCreateMutable
CFSetApplyFunction
CFDictionaryGetValueIfPresent
CFNotificationCenterGetTypeID
CFNotificationCenterAddObserver
CFNotificationCenterRemoveObserver
CFNotificationCenterPostNotification
CFNotificationCenterGetLocalCenter
CFRunLoopTimerInvalidate
CFRunLoopRunInMode
CFAbsoluteTimeGetCurrent
CFBundleCopyResourceURL
CFRunLoopWakeUp
CFRunLoopTimerCreate
CFRunLoopAddTimer
CFDataIncreaseLength
CFCopyDescription
CFDataDeleteBytes
CFDataAppendBytes
CFPropertyListCreateDeepCopy
CFArrayApplyFunction
CFArrayCreateMutableCopy
CFStringGetIntValue
CFDataCreateCopy
CFDictionaryCreateMutableCopy
CFBooleanGetTypeID
CFBooleanGetValue
CFArrayBSearchValues
CFSetSetValue
CFSetRemoveValue
CFSetGetValue
CFStringCreateWithPascalString
CFStringGetPascalString
kCFBooleanFalse
kCFBooleanTrue
CFRunLoopTimerGetInterval
CFRunLoopTimerIsValid
CFDictionaryReplaceValue
CFRunLoopTimerSetNextFireDate
CFURLGetTypeID
CFURLGetString
CFURLCopyAbsoluteURL
CFURLCreateWithFileSystemPath
kCFPreferencesCurrentUser
kCFDateFormatterIsLenient
CFPropertyListCreateData
CFDateCreate
CFAttributedStringSetAttribute
CFLocaleCreate
CFReadStreamOpen
CFURLCreateWithString
CFDateFormatterSetProperty
CFGregorianDateGetAbsoluteTime
CFAllocatorGetTypeID
CFDateFormatterCreate
kCFNull
CFBundleGetBundleWithIdentifier
CFTimeZoneCopySystem
CFDateFormatterGetAbsoluteTimeFromString
CFURLCanBeDecomposed
CFLocaleCopyCurrent
CFURLCreateCopyAppendingPathComponent
CFReadStreamCreateWithFile
CFBundleCopyResourcesDirectoryURL
CFURLCopyScheme
CFLocaleCreateCanonicalLocaleIdentifierFromScriptManagerCodes
CFStringHasPrefix
CFURLCopyHostName

corevideo

kCVImageBufferCleanApertureWidthKey
kCVBufferTimeValueKey
kCVBufferTimeScaleKey
CVBufferSetAttachment
CVBufferRemoveAttachment
CVBufferGetAttachment
CVPixelBufferGetTypeID
CVBufferRemoveAllAttachments
CVBufferGetAttachments
kCVImageBufferFieldDetailKey
kCVImageBufferPixelAspectRatioHorizontalSpacingKey
kCVImageBufferCleanApertureVerticalOffsetKey
kCVImageBufferYCbCrMatrixKey
kCVImageBufferCleanApertureHeightKey
kCVImageBufferChromaLocationBottomFieldKey
kCVImageBufferCleanApertureHorizontalOffsetKey
kCVImageBufferPixelAspectRatioVerticalSpacingKey
kCVImageBufferGammaLevelKey
CVPixelBufferGetWidth
kCVImageBufferColorPrimariesKey
kCVImageBufferCleanApertureKey
kCVImageBufferFieldCountKey
CVPixelBufferGetPixelFormatType
kCVImageBufferChromaLocationTopFieldKey
CVPixelBufferGetHeight
kCVImageBufferPixelAspectRatioKey
CVImageBufferGetEncodedSize
kCVImageBufferTransferFunctionKey
CVPixelBufferGetBytesPerRow
kCVImageBufferFieldDetailSpatialFirstLineEarly
kCVImageBufferChromaLocation_DV420
kCVImageBufferColorPrimaries_EBU_3213
kCVImageBufferYCbCrMatrix_ITU_R_601_4
kCVImageBufferChromaLocation_Center
kCVImageBufferChromaLocation_Left
kCVImageBufferChromaLocation_TopLeft
kCVImageBufferYCbCrMatrix_ITU_R_709_2
kCVImageBufferColorPrimaries_ITU_R_709_2
kCVImageBufferChromaLocation_Bottom
kCVImageBufferTransferFunction_ITU_R_709_2
kCVImageBufferColorPrimaries_SMPTE_C
kCVImageBufferChromaLocation_BottomLeft
kCVImageBufferYCbCrMatrix_SMPTE_240M_1995
kCVImageBufferTransferFunction_SMPTE_240M_1995
kCVImageBufferChromaLocation_Top
kCVImageBufferFieldDetailSpatialFirstLineLate
kCVImageBufferFieldDetailTemporalTopFirst
kCVImageBufferFieldDetailTemporalBottomFirst
kCVImageBufferTransferFunction_UseGamma

coregraphics

CGRectMakeWithDictionaryRepresentation
CGRectCreateDictionaryRepresentation
CGPointCreateDictionaryRepresentation
CGPointMakeWithDictionaryRepresentation
CGSizeMakeWithDictionaryRepresentation
CGColorGetNumberOfComponents
CGColorSpaceGetModel
CGColorGetComponents
CGColorGetColorSpace
CGSizeCreateDictionaryRepresentation

kernel32

IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange
DecodePointer
EncodePointer
GetCurrentProcessId
GetLastError
DeleteFileW
GetFileInformationByHandle
LoadLibraryExW
GetModuleHandleW
GetSystemTimeAsFileTime
FormatMessageW
LocalFree
SetLastError
DebugBreak
SetEndOfFile
SetFilePointerEx
WaitForSingleObject
WriteFile
GetFileAttributesW
ReadFile
CreateFileW
GetFileSizeEx
CreateEventW
CloseHandle
TryEnterCriticalSection
SetEvent
InitializeCriticalSection
Sleep
LeaveCriticalSection
ReleaseSemaphore
EnterCriticalSection
ResetEvent
CreateSemaphoreW
DeleteCriticalSection
TlsGetValue
InterlockedCompareExchange
TlsSetValue
TerminateThread
SetThreadPriority
OpenThread
GetExitCodeThread
GetThreadPriority
GetCurrentThreadId
TlsAlloc
TlsFree
ResumeThread
QueryPerformanceCounter
QueryPerformanceFrequency
VirtualFree
VirtualAlloc
GetSystemInfo
LoadLibraryW
GetProcAddress
SwitchToThread
GetFileSize
GetFullPathNameW
OutputDebugStringA
DeleteFileA
GetTickCount

user32

PeekMessageW

advapi32

CryptReleaseContext
RegOpenKeyExW
CryptHashData
CryptDestroyHash
CryptCreateHash
RegQueryValueExW
CryptAcquireContextW
CryptGetHashParam
RegCloseKey

shell32

SHCreateDirectoryExW

ole32

CoInitializeEx
CoUninitialize
StgOpenStorageEx

msvcr100

_beginthreadex
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_vsnprintf
_initterm
_tzname
_tzset
_encoded_null
free
calloc
strncpy
malloc
_errno
_vsnprintf_s
_wgetenv_s
wcsncat_s
wcscat_s
_vscprintf
_strnicmp
tolower
strncmp
isspace
isdigit
_stricmp
__iob_func
_getpid
_snprintf
strtol
fprintf
strftime
_localtime64
getenv
_time64
memcpy_s
_endthreadex
memset
wcsnlen
qsort
memmove
realloc
_isnan
isprint
iscntrl
_wstat64
_ctime64
_snprintf_s
strstr
fflush
printf
fopen
setvbuf
ftell
fclose
memcpy
_malloc_crt

Exports

Exports

CMAudioFormatDescriptionCopyAsBigEndianSoundDescriptionBlockBuffer
CMAudioFormatDescriptionCreate
CMAudioFormatDescriptionCreateFromBigEndianSoundDescriptionBlockBuffer
CMAudioFormatDescriptionCreateFromBigEndianSoundDescriptionData
CMAudioFormatDescriptionCreateSummary
CMAudioFormatDescriptionEqual
CMAudioFormatDescriptionGetChannelLayout
CMAudioFormatDescriptionGetFormatList
CMAudioFormatDescriptionGetMagicCookie
CMAudioFormatDescriptionGetMostCompatibleFormat
CMAudioFormatDescriptionGetRichestDecodableFormat
CMAudioFormatDescriptionGetStreamBasicDescription
CMAudioSampleBufferCreateReadyWithPacketDescriptions
CMAudioSampleBufferCreateWithPacketDescriptions
CMBaseClassGetCFTypeID
CMBaseGetClassID
CMBaseObjectGetClassID
CMBaseObjectGetDerivedStorage
CMBaseObjectGetVTable
CMBaseObjectIsMemberOfClass
CMBlockBufferAccessDataBytes
CMBlockBufferAppendBufferReference
CMBlockBufferAppendMemoryBlock
CMBlockBufferAssureBlockMemory
CMBlockBufferCopyDataBytes
CMBlockBufferCreateContiguous
CMBlockBufferCreateEmpty
CMBlockBufferCreateWithBufferReference
CMBlockBufferCreateWithMemoryBlock
CMBlockBufferFillDataBytes
CMBlockBufferGetDataLength
CMBlockBufferGetDataPointer
CMBlockBufferGetTypeID
CMBlockBufferIsEmpty
CMBlockBufferIsRangeContiguous
CMBlockBufferReplaceDataBytes
CMBufferQueueCallForEachBuffer
CMBufferQueueContainsEndOfData
CMBufferQueueCreate
CMBufferQueueDequeueAndRetain
CMBufferQueueDequeueIfDataReadyAndRetain
CMBufferQueueEnqueue
CMBufferQueueGetBufferCount
CMBufferQueueGetCallbacksForSampleBuffersSortedByOutputPTS
CMBufferQueueGetCallbacksForUnsortedSampleBuffers
CMBufferQueueGetDuration
CMBufferQueueGetEndPresentationTimeStamp
CMBufferQueueGetFirstDecodeTimeStamp
CMBufferQueueGetFirstPresentationTimeStamp
CMBufferQueueGetHead
CMBufferQueueGetMaxPresentationTimeStamp
CMBufferQueueGetMinDecodeTimeStamp
CMBufferQueueGetMinPresentationTimeStamp
CMBufferQueueGetTotalSize
CMBufferQueueGetTypeID
CMBufferQueueInstallTrigger
CMBufferQueueInstallTriggerWithIntegerThreshold
CMBufferQueueIsAtEndOfData
CMBufferQueueIsEmpty
CMBufferQueueMarkEndOfData
CMBufferQueueRemoveTrigger
CMBufferQueueReset
CMBufferQueueResetWithCallback
CMBufferQueueSetValidationCallback
CMBufferQueueTestTrigger
CMByteStreamAppend
CMByteStreamAppendBlockBuffer
CMByteStreamBaseGetTypeID
CMByteStreamCreateCompositeForRead
CMByteStreamCreateForBlockBuffer
CMByteStreamCreateForFileURL
CMByteStreamCreateWritableForBlockBuffer
CMByteStreamGetCMBaseObject
CMByteStreamGetClassID
CMByteStreamWriteBlockBuffer
CMClockConvertHostTimeToSystemUnits
CMClockGetAnchorTime
CMClockGetHostTimeClock
CMClockGetTime
CMClockGetTypeID
CMClockInvalidate
CMClockMakeHostTimeFromSystemUnits
CMClockMightDrift
CMClosedCaptionFormatDescriptionCopyAsBigEndianClosedCaptionDescriptionBlockBuffer
CMClosedCaptionFormatDescriptionCreateFromBigEndianClosedCaptionDescriptionBlockBuffer
CMClosedCaptionFormatDescriptionCreateFromBigEndianClosedCaptionDescriptionData
CMCopyDictionaryOfAttachments
CMCreateContiguousBlockBufferFromStream
CMDerivedObjectCreate
CMDoesBigEndianSoundDescriptionRequireLegacyCBRSampleTableLayout
CMFormatDescriptionCreate
CMFormatDescriptionEqual
CMFormatDescriptionEqualIgnoringExtensionKeys
CMFormatDescriptionGetExtension
CMFormatDescriptionGetExtensions
CMFormatDescriptionGetMediaSubType
CMFormatDescriptionGetMediaType
CMFormatDescriptionGetTypeID
CMGetAttachment
CMMemoryPoolCreate
CMMemoryPoolFlush
CMMemoryPoolGetAllocator
CMMemoryPoolGetTypeID
CMMemoryPoolInvalidate
CMMetadataCreateIdentifierForKeyAndKeySpace
CMMetadataCreateKeyFromIdentifier
CMMetadataCreateKeyFromIdentifierAsCFData
CMMetadataCreateKeySpaceFromIdentifier
CMMetadataDataTypeRegistryDataTypeConformsToDataType
CMMetadataDataTypeRegistryDataTypeIsBaseDataType
CMMetadataDataTypeRegistryDataTypeIsRegistered
CMMetadataDataTypeRegistryGetBaseDataTypeForConformingDataType
CMMetadataDataTypeRegistryGetBaseDataTypes
CMMetadataDataTypeRegistryGetConformingDataTypes
CMMetadataDataTypeRegistryGetDataTypeDescription
CMMetadataDataTypeRegistryRegisterDataType
CMMetadataFormatDescriptionCopyAsBigEndianMetadataDescriptionBlockBuffer
CMMetadataFormatDescriptionCreateByMergingMetadataFormatDescriptions
CMMetadataFormatDescriptionCreateFromBigEndianMetadataDescriptionBlockBuffer
CMMetadataFormatDescriptionCreateFromBigEndianMetadataDescriptionData
CMMetadataFormatDescriptionCreateWithKeys
CMMetadataFormatDescriptionCreateWithMetadataFormatDescriptionAndMetadataSpecifications
CMMetadataFormatDescriptionCreateWithMetadataSpecifications
CMMetadataFormatDescriptionGetIdentifiers
CMMetadataFormatDescriptionGetKeyWithLocalID
CMMuxedFormatDescriptionCreate
CMNotificationCenterAddListener
CMNotificationCenterBarrier
CMNotificationCenterCreate
CMNotificationCenterGetDefaultLocalCenter
CMNotificationCenterGetTypeID
CMNotificationCenterPostNotification
CMNotificationCenterRegisterForBarrierSupport
CMNotificationCenterRemoveListener
CMNotificationCenterUnregisterForBarrierSupport
CMPropagateAttachments
CMRemoveAllAttachments
CMRemoveAttachment
CMSampleBufferCallForEachSample
CMSampleBufferCopyPCMDataIntoAudioBufferList
CMSampleBufferCopySampleBufferForRange
CMSampleBufferCreate
CMSampleBufferCreateCopy
CMSampleBufferCreateCopyWithNewTiming
CMSampleBufferCreateForImageBuffer
CMSampleBufferCreateReady
CMSampleBufferCreateReadyWithImageBuffer
CMSampleBufferDataIsReady
CMSampleBufferGetAudioBufferListWithRetainedBlockBuffer
CMSampleBufferGetAudioStreamPacketDescriptions
CMSampleBufferGetAudioStreamPacketDescriptionsPtr
CMSampleBufferGetDataBuffer
CMSampleBufferGetDecodeTimeStamp
CMSampleBufferGetDuration
CMSampleBufferGetFormatDescription
CMSampleBufferGetImageBuffer
CMSampleBufferGetNumSamples
CMSampleBufferGetOutputDecodeTimeStamp
CMSampleBufferGetOutputDuration
CMSampleBufferGetOutputPresentationTimeStamp
CMSampleBufferGetOutputSampleTimingInfoArray
CMSampleBufferGetPresentationTimeStamp
CMSampleBufferGetSampleAttachmentsArray
CMSampleBufferGetSampleSize
CMSampleBufferGetSampleSizeArray
CMSampleBufferGetSampleTimingInfo
CMSampleBufferGetSampleTimingInfoArray
CMSampleBufferGetTotalSampleSize
CMSampleBufferGetTypeID
CMSampleBufferHasDataFailed
CMSampleBufferInvalidate
CMSampleBufferIsValid
CMSampleBufferMakeDataReady
CMSampleBufferSetDataBuffer
CMSampleBufferSetDataBufferFromAudioBufferList
CMSampleBufferSetDataFailed
CMSampleBufferSetDataReady
CMSampleBufferSetInvalidateCallback
CMSampleBufferSetOutputPresentationTimeStamp
CMSampleBufferTrackDataReadiness
CMSetAttachment
CMSetAttachments
CMSimpleQueueCreate
CMSimpleQueueDequeue
CMSimpleQueueEnqueue
CMSimpleQueueGetCapacity
CMSimpleQueueGetCount
CMSimpleQueueGetHead
CMSimpleQueueGetTypeID
CMSimpleQueueReset
CMSwapBigEndianClosedCaptionDescriptionToHost
CMSwapBigEndianImageDescriptionToHost
CMSwapBigEndianMetadataDescriptionToHost
CMSwapBigEndianSoundDescriptionToHost
CMSwapBigEndianTextDescriptionToHost
CMSwapBigEndianTimeCodeDescriptionToHost
CMSwapHostEndianClosedCaptionDescriptionToBig
CMSwapHostEndianImageDescriptionToBig
CMSwapHostEndianMetadataDescriptionToBig
CMSwapHostEndianSoundDescriptionToBig
CMSwapHostEndianTextDescriptionToBig
CMSwapHostEndianTimeCodeDescriptionToBig
CMSyncConvertTime
CMSyncGetRelativeRate
CMSyncGetRelativeRateAndAnchorTime
CMSyncGetTime
CMSyncMightDrift
CMTextFormatDescriptionCopyAsBigEndianTextDescriptionBlockBuffer
CMTextFormatDescriptionCreateFromBigEndianTextDescriptionBlockBuffer
CMTextFormatDescriptionCreateFromBigEndianTextDescriptionData
CMTextFormatDescriptionGetDefaultStyle
CMTextFormatDescriptionGetDefaultTextBox
CMTextFormatDescriptionGetDisplayFlags
CMTextFormatDescriptionGetFontName
CMTextFormatDescriptionGetJustification
CMTimeAbsoluteValue
CMTimeAdd
CMTimeClampToRange
CMTimeCodeFormatDescriptionCopyAsBigEndianTimeCodeDescriptionBlockBuffer
CMTimeCodeFormatDescriptionCreate
CMTimeCodeFormatDescriptionCreateFromBigEndianTimeCodeDescriptionBlockBuffer
CMTimeCodeFormatDescriptionCreateFromBigEndianTimeCodeDescriptionData
CMTimeCodeFormatDescriptionGetFrameDuration
CMTimeCodeFormatDescriptionGetFrameQuanta
CMTimeCodeFormatDescriptionGetTimeCodeFlags
CMTimeCompare
CMTimeConvertScale
CMTimeCopyAsCVBufferTimeDictionary
CMTimeCopyAsDictionary
CMTimeCopyDescription
CMTimeGetSeconds
CMTimeMake
CMTimeMakeFromCVBufferTimeDictionary
CMTimeMakeFromDictionary
CMTimeMakeWithEpoch
CMTimeMakeWithSeconds
CMTimeMapDurationFromRangeToRange
CMTimeMapTimeFromRangeToRange
CMTimeMaximum
CMTimeMinimum
CMTimeMultiply
CMTimeMultiplyByFloat64
CMTimeMultiplyByRatio
CMTimeRangeContainsTime
CMTimeRangeContainsTimeRange
CMTimeRangeCopyAsDictionary
CMTimeRangeCopyDescription
CMTimeRangeEqual
CMTimeRangeFromTimeToTime
CMTimeRangeGetEnd
CMTimeRangeGetIntersection
CMTimeRangeGetUnion
CMTimeRangeMake
CMTimeRangeMakeFromDictionary
CMTimeRangeShow
CMTimeShow
CMTimeSubtract
CMTimebaseAddTimer
CMTimebaseAddTimerDispatchSource
CMTimebaseCreateReadOnlyTimebase
CMTimebaseCreateWithMasterClock
CMTimebaseCreateWithMasterTimebase
CMTimebaseGetEffectiveRate
CMTimebaseGetMaster
CMTimebaseGetMasterClock
CMTimebaseGetMasterTimebase
CMTimebaseGetRate
CMTimebaseGetTime
CMTimebaseGetTimeAndRate
CMTimebaseGetTimeWithTimeScale
CMTimebaseGetTypeID
CMTimebaseGetUltimateMasterClock
CMTimebaseNotificationBarrier
CMTimebaseRemoveTimer
CMTimebaseRemoveTimerDispatchSource
CMTimebaseSetAnchorTime
CMTimebaseSetMasterClock
CMTimebaseSetMasterTimebase
CMTimebaseSetRate
CMTimebaseSetRateAndAnchorTime
CMTimebaseSetRateAndAnchorTimeWithFlags
CMTimebaseSetTime
CMTimebaseSetTimerDispatchSourceNextFireTime
CMTimebaseSetTimerDispatchSourceToFireImmediately
CMTimebaseSetTimerNextFireTime
CMTimebaseSetTimerToFireImmediately
CMVideoFormatDescriptionCopyAsBigEndianImageDescriptionBlockBuffer
CMVideoFormatDescriptionCreate
CMVideoFormatDescriptionCreateForImageBuffer
CMVideoFormatDescriptionCreateFromBigEndianImageDescriptionBlockBuffer
CMVideoFormatDescriptionCreateFromBigEndianImageDescriptionData
CMVideoFormatDescriptionCreateFromH264ParameterSets
CMVideoFormatDescriptionGetCleanAperture
CMVideoFormatDescriptionGetDimensions
CMVideoFormatDescriptionGetExtensionKeysCommonWithImageBuffers
CMVideoFormatDescriptionGetH264ParameterSetAtIndex
CMVideoFormatDescriptionGetPresentationDimensions
CMVideoFormatDescriptionMatchesImageBuffer
FigAtomStreamAdvanceToNextAtom
FigAtomStreamAdvanceToNextAtomWithType
FigAtomStreamAdvanceViaAtomPath
FigAtomStreamGetCurrentAtomDataGlobalOffset
FigAtomStreamGetCurrentAtomGlobalOffset
FigAtomStreamGetCurrentAtomHeaderSize
FigAtomStreamGetCurrentAtomOffsetInParent
FigAtomStreamGetCurrentAtomTypeAndDataLength
FigAtomStreamGetCurrentAtomUUIDType
FigAtomStreamGetCurrentAtomVersionAndFlags
FigAtomStreamInitWithBBuf
FigAtomStreamInitWithByteStream
FigAtomStreamInitWithByteStreamWithSize
FigAtomStreamInitWithMemoryBlock
FigAtomStreamInitWithParent
FigAtomStreamPositionAtFirstAtomWithType
FigAtomStreamPositionViaAtomPath
FigAtomStreamReadCurrentAtomAndCreateBBuf
FigAtomStreamReadCurrentAtomData
FigAtomStreamReadCurrentAtomDataAndCreateBBuf
FigAtomUtilityGetAtomTypeAndLengthInBBuf
FigAtomUtilityGetAtomTypeAndLengthInByteStream
FigAtomUtilityGetAtomTypeAndLengthInByteStreamWithSize
FigAtomWriterAppendBlockBufferData
FigAtomWriterAppendData
FigAtomWriterAppendVersionAndFlags
FigAtomWriterBeginAtom
FigAtomWriterBeginUUIDAtom
FigAtomWriterEndAtom
FigAtomWriterGetAtomDataSize
FigAtomWriterGetAtomGlobalDataOffset
FigAtomWriterGetAtomSize
FigAtomWriterInitWithBlockBuffer
FigAtomWriterInitWithByteStream
FigAtomWriterInitWithParent
FigAtomicAdd32
FigAtomicBitAnd32
FigAtomicBitAnd32Orig
FigAtomicBitOr32
FigAtomicBitOr32Orig
FigAtomicBitXor32
FigAtomicBitXor32Orig
FigAtomicCompareAndSwap32
FigAtomicCompareAndSwapPtr
FigAtomicDecrement32
FigAtomicIncrement32
FigAudioFormatDescriptionGetMostCompatibleFormatAndChannelLayout
FigAudioFormatDescriptionGetRichestDecodableFormatAndChannelLayout
FigBaseClassGetCFTypeID
FigBaseClassRegisterClass
FigBaseGetClassID
FigBaseObjectCopyDebugDescription
FigBaseObjectEqual
FigBaseObjectFinalize
FigBaseObjectGetClassID
FigBaseObjectGetDerivedStorage
FigBaseObjectGetVTable
FigBaseObjectInit
FigBaseObjectIsMemberOfClass
FigBaseObjectStandardNotificationBarrier
FigBlockBufferCompare
FigBlockBufferGetDataPointerAndOrigin
FigBlockBufferHexDump
FigBlockBufferHexDumpWithEmitter
FigBlockBufferRelease
FigBlockBufferRetain
FigBoxedMetadataAppendCFTypedValue
FigBoxedMetadataAppendCGAffineTransform
FigBoxedMetadataAppendCGPoint
FigBoxedMetadataAppendCGRect
FigBoxedMetadataAppendCGSize
FigBoxedMetadataAppendFloat32
FigBoxedMetadataAppendFloat64
FigBoxedMetadataAppendSInt16
FigBoxedMetadataAppendSInt32
FigBoxedMetadataAppendSInt64
FigBoxedMetadataAppendSInt8
FigBoxedMetadataAppendUInt16
FigBoxedMetadataAppendUInt32
FigBoxedMetadataAppendUInt64
FigBoxedMetadataAppendUInt8
FigBoxedMetadataAppendValue
FigBoxedMetadataCopyValueOfItemAtIndexAsCFType
FigBoxedMetadataCreateBlockBufferForIndex
FigBoxedMetadataCreateForConstruction
FigBoxedMetadataCreateFromBlockBuffer
FigBoxedMetadataEndConstruction
FigBoxedMetadataGetBlockBuffer
FigBoxedMetadataGetFormatDescription
FigBoxedMetadataGetLocalIDOfItemAtIndex
FigBoxedMetadataGetNumberOfItems
FigBoxedMetadataGetSizeOfItemAtIndex
FigBoxedMetadataGetTypeID
FigBoxedMetadataGetValueOfItemAtIndex
FigBoxedMetadataGetValueOfItemAtIndexAsCGAffineTransform
FigBoxedMetadataGetValueOfItemAtIndexAsCGPoint
FigBoxedMetadataGetValueOfItemAtIndexAsCGRect
FigBoxedMetadataGetValueOfItemAtIndexAsCGSize
FigBoxedMetadataGetValueOfItemAtIndexAsFloat32
FigBoxedMetadataGetValueOfItemAtIndexAsFloat64
FigBoxedMetadataGetValueOfItemAtIndexAsSInt16
FigBoxedMetadataGetValueOfItemAtIndexAsSInt32
FigBoxedMetadataGetValueOfItemAtIndexAsSInt64
FigBoxedMetadataGetValueOfItemAtIndexAsSInt8
FigBoxedMetadataGetValueOfItemAtIndexAsUInt16
FigBoxedMetadataGetValueOfItemAtIndexAsUInt32
FigBoxedMetadataGetValueOfItemAtIndexAsUInt64
FigBoxedMetadataGetValueOfItemAtIndexAsUInt8
FigBoxedMetadataIsUnderConstruction
FigBoxedMetadataRelease
FigBoxedMetadataRetain
FigBufferQueueDequeueIfMatchingAndRetain
FigBufferQueueRelease
FigBufferQueueRetain
FigByteStreamCopyMD5Digest
FigByteStreamCopySHA1Digest
FigByteStreamCreateForBlockBuffer
FigByteStreamCreateForFileURL
FigByteStreamCreateFromOpenFile
FigByteStreamProviderCreateForBaseURLWithSecurityOptions
FigByteStreamProviderGetClassID
FigByteStreamProviderGetFigBaseObject
FigByteStreamProviderGetTypeID
FigByteStreamStatsCreateStatsDictionary
FigByteStreamStatsLogOneRead
FigByteStreamStatsSetupWorker
FigByteStreamStatsTeardownWorker
FigCFArrayAppendCGRect
FigCFArrayAppendCMTime
FigCFArrayAppendDouble
FigCFArrayAppendInt32
FigCFArrayAppendInt64
FigCFArrayApplyFunction
FigCFArrayCreateConcatenationOfTwoArrays
FigCFArrayCreateMutableCopy
FigCFArrayForEach2
FigCFArrayGetCMTimeAtIndex
FigCFArrayGetCount
FigCFArrayGetDoubleAtIndex
FigCFArrayGetInt32AtIndex
FigCFAttributedStringSetDouble
FigCFBundleIDResourceSubdirExists
FigCFCopyCompactDescription
FigCFCreateCombinedDictionary
FigCFCreateExtendedDictionary
FigCFCreatePropertyListFromBundleIdentifier
FigCFCreatePropertyListFromBundleIdentifierOnPlatform
FigCFDateCreateFromString
FigCFDictionaryCopyArrayOfKeys
FigCFDictionaryCopyArrayOfValues
FigCFDictionaryCreateMappedArray
FigCFDictionaryCreateMutableCopy
FigCFDictionaryGetBooleanIfPresent
FigCFDictionaryGetCGFloatIfPresent
FigCFDictionaryGetCGRectIfPresent
FigCFDictionaryGetDoubleIfPresent
FigCFDictionaryGetFloat32IfPresent
FigCFDictionaryGetInt32IfPresent
FigCFDictionaryGetInt64IfPresent
FigCFDictionarySetCGFloat
FigCFDictionarySetCGRect
FigCFDictionarySetCMTime
FigCFDictionarySetDouble
FigCFDictionarySetFloat32
FigCFDictionarySetInt32
FigCFDictionarySetInt64
FigCFEqual
FigCFLocaleCreateWithMovieLangCode
FigCFParseISO8601Date
FigCFPropertyListCreateFromFigFileFork
FigCFPropertyListWriteToFigFileFork
FigCFRangeEqual
FigCFRangeGetLimit
FigCFStringCreateWithBytesAndMovieLangCode
FigCFStringCreateWithFileSystemRepresentation
FigCFStringGetFileSystemRepresentation
FigCFStringGetMaximumSizeOfFileSystemRepresentation
FigCFStringGetOSTypeValue
FigCFURLCreateCacheKey
FigCFURLCreateDirectory
FigCFURLCreateFromFileSystemRepresentation
FigCFURLCreateRelativeURLWithURLAndBaseURL
FigCFURLDoesDirectoryExist
FigCFURLGetFileStats
FigCFURLGetFileSystemRepresentation
FigCFURLIsLocalResource
FigCFWeakReferenceHolderCopyReferencedObject
FigCFWeakReferenceHolderCreateWithReferencedObject
FigCPECryptorGetClassID
FigCPECryptorGetNotificationCenter
FigCPECryptorGetTypeID
FigCheckIsCurrentDispatchQueue
FigCheckIsNotCurrentDispatchQueue
FigClockConvertHostTimeToSystemUnits
FigClockGetAnchorTime
FigClockGetHostTimeClock
FigClockGetTime
FigClockGetTypeID
FigClockInvalidate
FigClockMakeHostTimeFromSystemUnits
FigClockMightDrift
FigClockRelease

Sections

.text
Size: 370KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b73e90b04563664a3288e8cf2d485f4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

47:de:2f:9f:bf:7a:1d:41:91:f4:57:73:fa:11:3e:1dCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

19:f2:3c:8c:19:6d:46:33:a0:92:14:63:54:d9:6d:90:d6:1e:fd:e7Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

foundation

libdispatch

objc

corefoundation

corevideo

coregraphics

kernel32

user32

advapi32

shell32

ole32

msvcr100

Exports

Exports

Sections

.text Size: 370KB - Virtual size: 369KB

.rdata Size: 98KB - Virtual size: 98KB

.data Size: 6KB - Virtual size: 8KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 23KB - Virtual size: 22KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

47:de:2f:9f:bf:7a:1d:41:91:f4:57:73:fa:11:3e:1d
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

19:f2:3c:8c:19:6d:46:33:a0:92:14:63:54:d9:6d:90:d6:1e:fd:e7
Signer

.text
Size: 370KB - Virtual size: 369KB

.rdata
Size: 98KB - Virtual size: 98KB

.data
Size: 6KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 23KB - Virtual size: 22KB