DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
465701af1ee1b8d2728536bb224c2f7b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
465701af1ee1b8d2728536bb224c2f7b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
465701af1ee1b8d2728536bb224c2f7b_JaffaCakes118
Size
20KB
MD5
465701af1ee1b8d2728536bb224c2f7b
SHA1
7b834ef031ac95ca0e1c0b5982e529cf82faf748
SHA256
5e5462b810a3ba4395d39437366627236a75f78205d4df9ab535cfcc6e87c392
SHA512
e8092edc074870328202d95b126fd0430169b4991d9103fc4880906724408c4e9d7acb32192e0622d61f360b802efaa52b70d0981e078d71321925f27b0693c1
SSDEEP
384:EaQHnbrc3A+yTl2lS+KXQp65V/zFsxJQ82wRxIG3E:KH4jwl2PKXQsgB2w7IUE
Checks for missing Authenticode signature.
resource |
---|
465701af1ee1b8d2728536bb224c2f7b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
Sleep
lstrcpyA
lstrcmpA
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetPrivateProfileIntA
GetSystemTime
WritePrivateProfileStringA
CloseHandle
ReadFile
CreateFileA
SetFilePointer
GetModuleFileNameA
CreateThread
UnmapViewOfFile
OutputDebugStringA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
RtlUnwind
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
shutdown
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ