e:\ps11\ps_11_win_daily_retail\20080919.r.488\photoshop\main\photoshop\targets\win32\objs\quicktimegluerelease\QuickTimeGlue.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0820f1e8ff764dd91ae8ecda2c5d39a9_JaffaCakes118.dll
Resource
win7-20240508-en
General
-
Target
0820f1e8ff764dd91ae8ecda2c5d39a9_JaffaCakes118
-
Size
216KB
-
MD5
0820f1e8ff764dd91ae8ecda2c5d39a9
-
SHA1
c647bc9e759602ddc65f89e73d7004b416d4795d
-
SHA256
c5138a2012176879744b2c5ccca44fd27ce85c0d2489355d7c4f841ff4652cb6
-
SHA512
e0f9f0767b3be4d2ac4f23f6c123fba25036ecf86df713697c9932e735d5d3f61faf1dc3b000d796e12a4eb82be879e860300360e6b8f289295863da972da085
-
SSDEEP
3072:LTdNJJadKvzT0s2rRsamQN6ahC1bBz7zU/WZAn53mkZ8f7QJ49:LbukT0s/76C1bxsUAnLZe739
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0820f1e8ff764dd91ae8ecda2c5d39a9_JaffaCakes118
Files
-
0820f1e8ff764dd91ae8ecda2c5d39a9_JaffaCakes118.dll windows:4 windows x86 arch:x86
1ffd66fbfcc848b61d46a1d999f6e412
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetLastError
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
GetCurrentProcessId
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetProcAddress
GetModuleFileNameA
FreeLibrary
GlobalAlloc
GlobalFree
CloseHandle
user32
wsprintfA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
msvcr80
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_initterm_e
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
strncpy
_access
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
Exports
Exports
QTAddEmptyTrackToMovie
QTAddImageDescriptionExtension
QTAddMediaSample
QTAddMovieResource
QTBeginMediaEdits
QTCDSequenceEnd
QTCFRelease
QTCFStringCreateWithCharacters
QTCloseComponent
QTCloseMovieFile
QTCompressSequenceBegin
QTCompressSequenceFrame
QTCopyPixMapPixels
QTCopyTrackSettings
QTCountImageDescriptionExtensionType
QTCreateMovieFile
QTCreatePortAssociation
QTDestroyPortAssociation
QTDisposeCTable
QTDisposeGWorld
QTDisposeHandle
QTDisposeMovie
QTDisposeMovieController
QTEndMediaEdits
QTEnterMovies
QTExitMovies
QTFindNextComponent
QTFlattenMovie
QTGestalt
QTGetCodecInfo
QTGetComponentInfo
QTGetGWorldDevice
QTGetGWorldPixMap
QTGetHWNDPort
QTGetHandleSize
QTGetImageDescClutID
QTGetImageDescSampleDepth
QTGetImageDescriptionCTable
QTGetImageDescriptionExtension
QTGetMaxCompressionSize
QTGetMediaDuration
QTGetMediaHandler
QTGetMediaHandlerDescription
QTGetMediaNextInterestingTime
QTGetMediaSampleCount
QTGetMediaSampleDescription
QTGetMediaSampleDescriptionCount
QTGetMediaTimeScale
QTGetMovieBox
QTGetMovieDuration
QTGetMovieGWorld
QTGetMovieIndTrackType
QTGetMovieNextInterestingTime
QTGetMoviePreferredRate
QTGetMovieTime
QTGetMovieTimeBase
QTGetMovieTimeScale
QTGetMovieTrackCount
QTGetPAR_HSpacing
QTGetPAR_VSpacing
QTGetPixBaseAddr
QTGetPixMapBounds
QTGetPixelsState
QTGetPort
QTGetStringFromHandle
QTGetTrackDimensions
QTGetTrackEnabled
QTGetTrackMedia
QTGoToBeginningOfMovie
QTHLock
QTHUnlock
QTICMImageDescriptionGetProperty
QTInitializeBridge
QTInitializeQTML
QTInsertMediaIntoTrack
QTInsertTrackSegment
QTIsCTableGrayscale
QTLockPixels
QTMCDoAction
QTMCDoActionGoToTime
QTMCDoActionPlay
QTMCDoActionSetVolume
QTMCEnableEditing
QTMCGetCurrentTime
QTMCIdle
QTMCMovieChanged
QTMacSetPort
QTMakeImageDescriptionForPixMap
QTMediaGetPublicInfo
QTMediaGetPublicInfoEncodedFrameRate
QTMediaHasCharacteristic
QTMovieExportAddDataSource
QTMovieExportDoUserDialog
QTMovieExportFromProceduresToDataRef
QTMovieExportGetFileNameExtension
QTMovieExportGetSettingsAsAtomContainer
QTMovieExportSetProgressProc
QTMovieExportSetSettingsFromAtomContainer
QTMoviesTask
QTNewHandle
QTNewMovieController
QTNewMovieExportGetDataUPP
QTNewMovieExportGetPropertyUPP
QTNewMovieFromDataRef
QTNewMovieFromFile
QTNewMovieTrack
QTNewTrackMedia
QTOpenComponent
QTOpenDefaultComponent
QTOpenMovieFile
QTPrerollMovie
QTQTDisposeAtomContainer
QTQTFindChildByID
QTQTGetAtomDataPtr
QTQTGetPixMapHandleGammaLevel
QTQTGetPixMapHandleRowBytes
QTQTInsertChild
QTQTNewAlias
QTQTNewDataReferenceFromFullPathCFString
QTQTNewGWorld
QTQTNewGWorldFromPtr
QTQTRemoveAtom
QTQTSetAtomData
QTQTSetPixMapHandleGammaLevel
QTQTSetPixMapHandleRequestedGammaLevel
QTSCGetInfo
QTSCRequestImageSettings
QTSCRequestSequenceSettings
QTSCSetInfo
QTSCSetTestImagePixMap
QTSetMediaSampleDescription
QTSetMovieBox
QTSetMovieGWorld
QTSetMoviePlayHints
QTSetMovieSelection
QTSetMovieTimeScale
QTSetMovieTimeValue
QTSetPAR_Spacing
QTSetTrackEnabled
QTSetTrackOffset
QTTerminateQTML
QTUnlockPixels
QTUpdateMovie
QTUpdateMovieResource
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE