CreateCNonrefdecInstance
CreateIFMTdec
CreateMSMTdec
CreateVideoDecoder
DecodeIFMT
DecodeMSMT
DecodeNonref
IsDllUsing
ReleaseCNonrefdecInstance
ReleaseIFMTdec
ReleaseMSMTdec
ResetCNonrefdecInstance
SetDeocderInstanceIndex
Static task
static1
Behavioral task
behavioral1
Sample
0dd059c66c73aef08addb4efdff173d3_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0dd059c66c73aef08addb4efdff173d3_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0dd059c66c73aef08addb4efdff173d3_JaffaCakes118
Size
377KB
MD5
0dd059c66c73aef08addb4efdff173d3
SHA1
9ae6afe7944876c5e237ca63ed3b8e303197cbb6
SHA256
828103af31a726aa1cd132ebb388806b9f9ae9c0861991000385d7e5e634f823
SHA512
eeac59704e6f8e4bf3fa7f65e232bfc0d8b3800f79ce5046b545b1e45c5b1dac1f823e29a0dbcc942fd1b57ef91ed1ab8c50fcad6f9f597e512b74b867e1cba9
SSDEEP
6144:S3avMkDVaMVSEORZzN+Bd5aeZH8qzMKKMPvlvV0+ANKE/khy31XRS3OTQRsDk3MM:S3tS80OR/+BDaT2aMlva1oEsU0OURsYn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
0dd059c66c73aef08addb4efdff173d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateCNonrefdecInstance
CreateIFMTdec
CreateMSMTdec
CreateVideoDecoder
DecodeIFMT
DecodeMSMT
DecodeNonref
IsDllUsing
ReleaseCNonrefdecInstance
ReleaseIFMTdec
ReleaseMSMTdec
ResetCNonrefdecInstance
SetDeocderInstanceIndex
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE