DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
1adfb90aa551027e730762ba9815b947_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1adfb90aa551027e730762ba9815b947_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1adfb90aa551027e730762ba9815b947_JaffaCakes118
Size
20KB
MD5
1adfb90aa551027e730762ba9815b947
SHA1
b0ed72ea2cd13b05f13e8f82839a83e7a946f327
SHA256
1da7f7cfae2b3af57e1079e49b4931aaae628d9dff56e22ca5d9a9b9d9b21835
SHA512
e28ded80c314a03df33bc87f8d2cd7c43304abea62092bfdeef435a315b48f3fb2fc7a9cff7a426458f948052b2b1ecce29003ae834ad8948395ef2212be6546
SSDEEP
384:iN/+qZ8AEb1MkKV9Q9jJf5rpcO/cxxiuB8Jx8nn9anxJ:it+lAEPK4hGG6n98J
Checks for missing Authenticode signature.
resource |
---|
1adfb90aa551027e730762ba9815b947_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualProtect
Sleep
lstrcpyA
lstrcatA
lstrcmpA
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetPrivateProfileIntA
GetSystemTime
WritePrivateProfileStringA
CloseHandle
ReadFile
CreateFileA
SetFilePointer
GetModuleFileNameA
CreateThread
UnmapViewOfFile
OutputDebugStringA
LoadLibraryA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
RtlUnwind
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
shutdown
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ