DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
42e60b0f1a62e67c494572f6d3684b2e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42e60b0f1a62e67c494572f6d3684b2e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
42e60b0f1a62e67c494572f6d3684b2e_JaffaCakes118
Size
24KB
MD5
42e60b0f1a62e67c494572f6d3684b2e
SHA1
8e7f4728e325635e5739064c6eadd676733d2828
SHA256
965fd258fc645cc7562d7b3a15caf9115df3d13f504981826e95a894e7890adb
SHA512
99b11b5c4fdf6ee2d0c642a789a539c7061f5e8aa2abc94b39616997d996198a765ffd85b8b9579b2fce1f99ec5522be2f23b14946967a7086da803ec9bcfe36
SSDEEP
384:5KID2zuvo6evY9AYcr4x1eqXbOwcVHhI2kaS4HFCMD6lh25pZ795ud3ImqYz:5KmTo6egSIw5XH51HgMD6lY7ZB+jz
Checks for missing Authenticode signature.
resource |
---|
42e60b0f1a62e67c494572f6d3684b2e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetModuleHandleA
VirtualAlloc
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
lstrcmpA
CreateFileA
CreateThread
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
LoadLibraryA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
lstrcatA
lstrcpyA
Sleep
ReadFile
VirtualProtect
RtlUnwind
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
FindWindowA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
shutdown
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ