DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
25627b26ea8e7a8c2ea2bf79f3b1763f_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
25627b26ea8e7a8c2ea2bf79f3b1763f_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
25627b26ea8e7a8c2ea2bf79f3b1763f_JaffaCakes118
Size
25KB
MD5
25627b26ea8e7a8c2ea2bf79f3b1763f
SHA1
eecc565bb4c7ced4f6490fba6bc12d89ae45583d
SHA256
8be2398e3a9a8e31fd99d6a8b370fbfc535f383f2e991c0ef6df92c289d92179
SHA512
6e41ccd3129477a74e60ab6c6207b1b3cc38d2d3fdbba313da84a876cae49ccc7f1dbfb04ea4a86cbd0226dc87f6454537104b285f57740c50ec8b3b84161a61
SSDEEP
384:7hAnMpP+P0Q3uGWOH1eUh+FDXrWfQlIizsI2ZzcEROU44b25pZdLGud3IUbr1r:7bPWrjUUuDS2gZzdROUBa7Zdhjr1r
Checks for missing Authenticode signature.
resource |
---|
25627b26ea8e7a8c2ea2bf79f3b1763f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetModuleHandleA
VirtualAlloc
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
lstrcmpA
CreateFileA
CreateThread
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
LoadLibraryA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
lstrcatA
lstrcpyA
Sleep
ReadFile
VirtualProtect
RtlUnwind
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
FindWindowA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
shutdown
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ