DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
4a710dd766ee6d9ea745475bce9cfb40_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a710dd766ee6d9ea745475bce9cfb40_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
4a710dd766ee6d9ea745475bce9cfb40_JaffaCakes118
Size
26KB
MD5
4a710dd766ee6d9ea745475bce9cfb40
SHA1
7e5b565f2de233df31c509d31f25c086f3fd82b7
SHA256
87ca82931a239a83db52c8122ed013858942ee03a784e710e0ad427e0ca261bc
SHA512
7be75f0a4cc9cb75aaa7ae21621253c12ca3f9422899c7cb940224638a7ea710a3fb0ff2528b9f1737f270ffb957f46f93317da43b38e1c3f7d6001efbbb658b
SSDEEP
768:yxo0y5bmiIEcPyDygAR/2a9ccuYPylySZ:yi06bmiI/PyDUMyC
Checks for missing Authenticode signature.
resource |
---|
4a710dd766ee6d9ea745475bce9cfb40_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
Sleep
lstrcmpA
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetModuleHandleA
VirtualAlloc
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
ReadFile
CreateFileA
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
RtlUnwind
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ