DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
14c5c2e1f2622a8db5ab98d553147734_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
14c5c2e1f2622a8db5ab98d553147734_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
14c5c2e1f2622a8db5ab98d553147734_JaffaCakes118
Size
24KB
MD5
14c5c2e1f2622a8db5ab98d553147734
SHA1
3ada434542c1f53477ec1489b6e7fb13726f86c8
SHA256
8898fa5c53c81539f987ad819a0104114872ba30c65471f43481a3220015c164
SHA512
a4c92e2e05109a875d08aebad928713fa5b129ab4b2bef669324f27e356c3528365f189131da0625dff3b58fb75e1d2eb3fb1e42547e86b5093cd1288409f149
SSDEEP
384:0qVnf3z7GslZA4oRGPAg4oYbD1po6FXbVp6W6hgiUakII2uL17j+lXL25pZ89RIA:0CWsM4oRaCXjVeii/kkuhWa7ZERfpH
Checks for missing Authenticode signature.
resource |
---|
14c5c2e1f2622a8db5ab98d553147734_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetModuleHandleA
VirtualAlloc
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
lstrcpyA
ReadFile
CreateFileA
CreateThread
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
LoadLibraryA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
lstrcmpA
Sleep
VirtualProtect
CloseHandle
OutputDebugStringA
RtlUnwind
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
FindWindowA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
shutdown
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ