DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
f027807fac822654bd682e531c9f939d_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f027807fac822654bd682e531c9f939d_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f027807fac822654bd682e531c9f939d_JaffaCakes118
Size
20KB
MD5
f027807fac822654bd682e531c9f939d
SHA1
acdca4d7d06f4631f549ea9d0288b1c171b96078
SHA256
23874a8fdadc72872d1b2c71362ab6b94a62dd4720df03d7bd07bff84ab29bf5
SHA512
814653afd2af0082ed5f1a9a105eae2241ef907eb740ccd6fe930067e9a49d10f3ec22a46ac55ea372c07e69533d1e01a44ef26b1e8413f88d2bb2b5744543b7
SSDEEP
384:BHvYPuPXaKolHmXZbNr1LJKwuieDnIOtaRft/:BHl0lG7pLQPtaNt/
Checks for missing Authenticode signature.
resource |
---|
f027807fac822654bd682e531c9f939d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
Sleep
lstrcpyA
lstrcmpA
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetPrivateProfileIntA
GetSystemTime
WritePrivateProfileStringA
CloseHandle
CreateThread
ReadFile
CreateFileA
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
RtlUnwind
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ