DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
4afa70520fdb0bc735ed1d1092aee9c2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4afa70520fdb0bc735ed1d1092aee9c2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4afa70520fdb0bc735ed1d1092aee9c2_JaffaCakes118
Size
22KB
MD5
4afa70520fdb0bc735ed1d1092aee9c2
SHA1
2ca2d3eb338f84f1751f32c4d21ebf1b8edd041a
SHA256
f4e287fa58dd032c616defdbcd4eaca0b1217836b340b49d2011f3b9c9148856
SHA512
230c9c71a94cc8e7389acac2af4dfd172d3be98c532aa80258db1a72b3aaaf5c4ac9839b90951f353a6996c261fe55dd73858804455f8242cd1cdef16e3936c3
SSDEEP
384:5RVWv4LjcK9VY61aKiSbW31wOUn04WI2rQiL/VOxf0Z0XF0R09//oZ6uLNd5gV:5RsvK9VBO2xu3/Qxf0Z0XF0R0hAZ6YNu
Checks for missing Authenticode signature.
resource |
---|
4afa70520fdb0bc735ed1d1092aee9c2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetModuleHandleA
VirtualAlloc
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
ReadFile
CreateFileA
lstrcatA
Process32First
CreateToolhelp32Snapshot
CreateThread
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
OutputDebugStringA
LoadLibraryA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
lstrcpyA
lstrcmpA
Sleep
Process32Next
VirtualProtect
RtlUnwind
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetCloseHandle
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
shutdown
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ