DllEntry
_FreeMPEGEngine
_FreeMPEGStream
_GetCurrentPicture
_GetSinglePicture
_InitMPEGEngine
_InitMPEGStream
Static task
static1
Behavioral task
behavioral1
Sample
29bc46df460516115089519b3bc3a010_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29bc46df460516115089519b3bc3a010_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29bc46df460516115089519b3bc3a010_JaffaCakes118
Size
45KB
MD5
29bc46df460516115089519b3bc3a010
SHA1
70ee03222faf30e32f0a8b8770a25b5d4df3147c
SHA256
58cb5b1de3ea52fa3c13404ab268b1c268311c5e7070c4f6e4f743073cb267a1
SHA512
70cbcc8c4d403a09a862b3b6641417ba056b3170e3a8579c41adec25b48903ded3f0a6851fc48f21a1e52a19afd903b66d0ec20db982c3558ea0fe8ab88f8ad3
SSDEEP
768:12fu7rV1sZdIRkcLH12jR3OpA2rq1ailSvkzOkTn6VIFxDMtCAN:cfC1sDmV2jR3OpA2kN4
Checks for missing Authenticode signature.
resource |
---|
29bc46df460516115089519b3bc3a010_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
timeGetTime
timeSetEvent
GetMessageA
InvalidateRect
MessageBoxA
PeekMessageA
PostMessageA
PostThreadMessageA
UpdateWindow
wsprintfA
CloseHandle
CreateEventA
CreateFileA
CreateFileMappingA
CreateThread
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentThreadId
GetFileSize
GetProcAddress
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalUnlock
InitializeCriticalSection
IsBadReadPtr
LeaveCriticalSection
LoadLibraryA
ReadFile
RtlMoveMemory
SetEvent
SetFilePointer
SetThreadPriority
Sleep
TerminateThread
VirtualAlloc
VirtualFree
WriteFile
lstrlenA
DllEntry
_FreeMPEGEngine
_FreeMPEGStream
_GetCurrentPicture
_GetSinglePicture
_InitMPEGEngine
_InitMPEGStream
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ