DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
4ab347858d0525c0d675c075d9c64fac_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4ab347858d0525c0d675c075d9c64fac_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4ab347858d0525c0d675c075d9c64fac_JaffaCakes118
Size
20KB
MD5
4ab347858d0525c0d675c075d9c64fac
SHA1
7d043e349bbab0d69f34995efc36ecc869828fb7
SHA256
3d87d628ea1de192ec05a62f853c06e23cf386a2947130cea15244d55be5cb7f
SHA512
0626d083735ece2268480a4e9dd0f295adc903270a47f4c8e9568ac9798f84f83a2eb77eaf836f477a7aeb17f8431161120443e7c4e3f498cd139a6f80fccc5d
SSDEEP
384:pK6p1hop8pjx++5R2sng+kUV5OL8FPScJx8/W9aH25S:Y6p1h3mZsnr5R6/2W
Checks for missing Authenticode signature.
resource |
---|
4ab347858d0525c0d675c075d9c64fac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualProtect
Sleep
lstrcpyA
lstrcatA
lstrcmpA
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetPrivateProfileIntA
GetSystemTime
WritePrivateProfileStringA
CloseHandle
ReadFile
CreateFileA
SetFilePointer
GetModuleFileNameA
CreateThread
UnmapViewOfFile
OutputDebugStringA
LoadLibraryA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
RtlUnwind
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
shutdown
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ