DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
f99eada933d58bd16deb196b0c872fdb_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f99eada933d58bd16deb196b0c872fdb_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f99eada933d58bd16deb196b0c872fdb_JaffaCakes118
Size
26KB
MD5
f99eada933d58bd16deb196b0c872fdb
SHA1
7d91b31e8e5750df8340c12336ab68c87a5c7727
SHA256
b926f4a6291bb233c3179e880f21fc532953295492ed65e93b1abbf2352f8e6a
SHA512
ced0b79bc669ad6dab90abcbc8a74ca6ee0be7b96714ee0641a2cef2bdeb8dad5d191a02d0085b70dc1a98a68a41cf982b3d79287e232e6ba30386e04390a72e
SSDEEP
384:MQluTA4WDZH/fOmWuLF/7mzTedfnruGDzh+dogzc5Tj2IOLtcd5fzCOpQV:dluhWFV7oGxCox5TiPLteLCOpQV
Checks for missing Authenticode signature.
resource |
---|
f99eada933d58bd16deb196b0c872fdb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
Sleep
lstrcpyA
lstrcmpA
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetModuleHandleA
VirtualAlloc
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
ReadFile
CreateFileA
CreateThread
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
RtlUnwind
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ