CreateCNonrefdecInstance
CreateIFMTdec
CreateMSMTdec
CreateVideoDecoder
DecodeIFMT
DecodeMSMT
DecodeNonref
IsDllUsing
ReleaseCNonrefdecInstance
ReleaseIFMTdec
ReleaseMSMTdec
ResetCNonrefdecInstance
SetDeocderInstanceIndex
Static task
static1
Behavioral task
behavioral1
Sample
291554e948ae2bca70a180b43e322f0d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
291554e948ae2bca70a180b43e322f0d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
291554e948ae2bca70a180b43e322f0d_JaffaCakes118
Size
477KB
MD5
291554e948ae2bca70a180b43e322f0d
SHA1
ba960d618d4fbe5d83cdba6d35e507d235fb1b79
SHA256
45f314e6615fffcb12125a566e07e3c14761942bebb62ac6e735f3a82413f813
SHA512
537288df6342e5fd6937dc2dd1d9a1bd951ce07fe59c90609dc68af77ab6b4ec7048186a78c85de9167e123e1b4caf87a70b2523f01d71a2cf0b85350c3a0f34
SSDEEP
6144:qgE+QeGVy21SV5K2yGiw3VzIEaiZisTAC+t2G3DMekUXxWPjxDJ4C0DyXzbSPfSC:qU2+5xysVsEnj/k3YwxK4RuDEa7NY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
291554e948ae2bca70a180b43e322f0d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateCNonrefdecInstance
CreateIFMTdec
CreateMSMTdec
CreateVideoDecoder
DecodeIFMT
DecodeMSMT
DecodeNonref
IsDllUsing
ReleaseCNonrefdecInstance
ReleaseIFMTdec
ReleaseMSMTdec
ResetCNonrefdecInstance
SetDeocderInstanceIndex
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE