c:\ac\divxplayerrepository\divxplayerx-10_03_01_numan\bin\releasedynamic\dpxmediamanagerplugin\DPXMediaManagerPlugin.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b7798cac679f175ed92020cea61fae80_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7798cac679f175ed92020cea61fae80_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b7798cac679f175ed92020cea61fae80_JaffaCakes118
-
Size
392KB
-
MD5
b7798cac679f175ed92020cea61fae80
-
SHA1
164feefe384712cd65b0f9664c73637b9f01ecb4
-
SHA256
eec1840e896a4c6a3265998d73dcc3645bd085bff84c074d559a324ae0b8bbe6
-
SHA512
f5a145024882bde204ccad4abead6cadf4b0b575e08da9165361e280df67640bfff61aabbb904a38810fb95f58384d492825fb55572a0c61ab0bde74f0410c6a
-
SSDEEP
12288:LuoswnCXws0SZV3kCJI3SgsQlubzP81GOh9w:SfV6SgsQu3IJw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7798cac679f175ed92020cea61fae80_JaffaCakes118
Files
-
b7798cac679f175ed92020cea61fae80_JaffaCakes118.dll windows:4 windows x86 arch:x86
d90cbf6782a57c27a9e24c98d41fe660
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
qtcore4
??0QMutex@@QAE@W4RecursionMode@0@@Z
??0QByteArray@@QAE@PBD@Z
??1QMutex@@QAE@XZ
?qUnregisterResourceData@@YA_NHPBE00@Z
?qDebug@@YA?AVQDebug@@XZ
??6QDebug@@QAEAAV0@PBD@Z
??1QDebug@@QAE@XZ
??6QDebug@@QAEAAV0@ABVQString@@@Z
?toUrl@QVariant@@QBE?AVQUrl@@XZ
?currentDateTime@QDateTime@@SA?AV1@XZ
?exists@QFile@@SA_NABVQString@@@Z
?rename@QFile@@SA_NABVQString@@0@Z
?readAll@QIODevice@@QAE?AVQByteArray@@XZ
??0QString@@QAE@ABVQByteArray@@@Z
?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z
?trimmed@QString@@QBE?AV1@XZ
??1QByteArray@@QAE@XZ
?unlock@QMutexLocker@@QAEXXZ
??4QString@@QAEAAV0@PBD@Z
??YQString@@QAEAAV0@PBD@Z
??0QVariant@@QAE@ABV?$QList@VQVariant@@@@@Z
?shared_null@QListData@@2UData@1@A
?remove@QListData@@QAEXH@Z
?insert@QListData@@QAEPAPAXH@Z
?qt_assert_x@@YAXPBD00H@Z
??8QString@@QBE_NABV0@@Z
??0QVariant@@QAE@I@Z
?section@QString@@QBE?AV1@VQChar@@HHV?$QFlags@W4SectionFlag@QString@@@@@Z
??0QUrl@@QAE@ABVQString@@@Z
?rehash@QHashData@@QAEXH@Z
?hasShrunk@QHashData@@QAEXXZ
??0QVariant@@QAE@_J@Z
?toLongLong@QVariant@@QBE_JPA_N@Z
??0QDateTime@@QAE@ABV0@@Z
??0QDateTime@@QAE@XZ
?userType@QVariant@@QBEHXZ
?constData@QVariant@@QBEPBXXZ
??0QUrl@@QAE@ABV0@@Z
??0QUrl@@QAE@XZ
?allocateNode@QHashData@@QAEPAXXZ
?detach_helper@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZH@Z
?qt_assert@@YAXPBD0H@Z
?destroyAndFree@QHashData@@QAEXXZ
??0QVariant@@QAE@ABVQDateTime@@@Z
??0QVariant@@QAE@ABVQUrl@@@Z
?isNull@QVariant@@QBE_NXZ
?handler@QVariant@@1PBUHandler@1@B
?toUInt@QVariant@@QBEIPA_N@Z
?isEmpty@QUrl@@QBE_NXZ
?toInt@QVariant@@QBEHPA_N@Z
?toString@QUrl@@QBE?AVQString@@V?$QFlags@W4FormattingOption@QUrl@@@@@Z
?right@QString@@QBE?AV1@H@Z
??0QFileInfo@@QAE@ABVQString@@@Z
?dir@QFileInfo@@QBE?AVQDir@@XZ
??0QFileInfo@@QAE@XZ
?baseName@QFileInfo@@QBE?AVQString@@XZ
?append@QString@@QAEAAV1@PBD@Z
?setFile@QFileInfo@@QAEXABVQDir@@ABVQString@@@Z
?exists@QFileInfo@@QBE_NXZ
?absoluteFilePath@QFileInfo@@QBE?AVQString@@XZ
?remove@QFile@@QAE_NXZ
??1QFileInfo@@QAE@XZ
??1QDir@@QAE@XZ
??4QVariant@@QAEAAV0@ABV0@@Z
?freeNode@QHashData@@QAEXPAX@Z
??0QVariant@@QAE@ABV0@@Z
?shared_null@QHashData@@2U1@A
??0QMutexLocker@@QAE@PAVQMutex@@@Z
?unlock@QMutex@@QAEXXZ
??1QMutexLocker@@QAE@XZ
??0QFile@@QAE@ABVQString@@@Z
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QXmlStreamReader@@QAE@PAVQIODevice@@@Z
?atEnd@QXmlStreamReader@@QBE_NXZ
?toString@QStringRef@@QBE?AVQString@@XZ
?readNext@QXmlStreamReader@@QAE?AW4TokenType@1@XZ
?name@QXmlStreamReader@@QBE?AVQStringRef@@XZ
?attributes@QXmlStreamReader@@QBE?AVQXmlStreamAttributes@@XZ
?value@QXmlStreamAttributes@@QBE?AVQStringRef@@ABVQString@@@Z
??1?$QVector@VQXmlStreamAttribute@@@@QAE@XZ
??4QString@@QAEAAV0@ABV0@@Z
?toLower@QString@@QBE?AV1@XZ
?toInt@QString@@QBEHPA_NH@Z
?free@?$QVector@VQXmlStreamAttribute@@@@AAEXPAU?$QVectorTypedData@VQXmlStreamAttribute@@@@@Z
?replace@QString@@QAEAAV1@VQChar@@0W4CaseSensitivity@Qt@@@Z
?startsWith@QString@@QBE_NABV1@W4CaseSensitivity@Qt@@@Z
?startsWith@QString@@QBE_NABVQChar@@W4CaseSensitivity@Qt@@@Z
??0QVariant@@QAE@XZ
??0QVariant@@QAE@_N@Z
?toULongLong@QString@@QBE_KPA_NH@Z
??1QXmlStreamReader@@QAE@XZ
??1QFile@@UAE@XZ
??1QStringRef@@QAE@XZ
??1QXmlStreamAttributes@@QAE@XZ
??0QString@@QAE@ABV0@@Z
?codecForCStrings@QString@@0PAVQTextCodec@@A
??8@YA_NABVQLatin1String@@ABVQStringRef@@@Z
??8@YA_NABVQString@@ABVQStringRef@@@Z
?fromAscii@QString@@SA?AV1@PBDH@Z
?append@QString@@QAEAAV1@ABV1@@Z
?toString@QVariant@@QBE?AVQString@@XZ
??0QUrl@@QAE@ABVQString@@W4ParsingMode@0@@Z
?path@QUrl@@QBE?AVQString@@XZ
??1QUrl@@QAE@XZ
??0QChar@@QAE@D@Z
?lastIndexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z
?toDateTime@QVariant@@QBE?AVQDateTime@@XZ
?mid@QString@@QBE?AV1@HH@Z
??1QDateTime@@QAE@XZ
??0QVariant@@QAE@_K@Z
??8QString@@QBE_NPBD@Z
?shared_null@QString@@0UData@1@A
?append@QListData@@QAEPAPAXXZ
?detach2@QListData@@QAEPAUData@1@XZ
?qFree@@YAXPAX@Z
??0QVariant@@QAE@H@Z
?fromAscii_helper@QString@@CAPAUData@1@PBDH@Z
?free@QString@@CAXPAUData@1@@Z
??0QVariant@@QAE@ABVQString@@@Z
??1QVariant@@QAE@XZ
?toULongLong@QVariant@@QBE_KPA_N@Z
??1QString@@QAE@XZ
?qRegisterResourceData@@YA_NHPBE00@Z
qtsql4
??0QSqlDatabase@@QAE@XZ
??1QSqlDatabase@@QAE@XZ
??4QSqlRecord@@QAEAAV0@ABV0@@Z
?lastError@QSqlQuery@@QBE?AVQSqlError@@XZ
?text@QSqlError@@QBE?AVQString@@XZ
??1QSqlError@@QAE@XZ
?setForwardOnly@QSqlQuery@@QAEX_N@Z
?isActive@QSqlQuery@@QBE_NXZ
?clear@QSqlQuery@@QAEXXZ
?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z
?open@QSqlDatabase@@QAE_NXZ
?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z
?setConnectOptions@QSqlDatabase@@QAEXABVQString@@@Z
?execBatch@QSqlQuery@@QAE_NW4BatchExecutionMode@1@@Z
?finish@QSqlQuery@@QAEXXZ
??0QSqlQuery@@QAE@ABV0@@Z
?isOpen@QSqlDatabase@@QBE_NXZ
?close@QSqlDatabase@@QAEXXZ
?removeDatabase@QSqlDatabase@@SAXABVQString@@@Z
??4QSqlDatabase@@QAEAAV0@ABV0@@Z
?commit@QSqlDatabase@@QAE_NXZ
?rollback@QSqlDatabase@@QAE_NXZ
?transaction@QSqlDatabase@@QAE_NXZ
?value@QSqlRecord@@QBE?AVQVariant@@ABVQString@@@Z
?record@QSqlQuery@@QBE?AVQSqlRecord@@XZ
?numRowsAffected@QSqlQuery@@QBEHXZ
??1QSqlRecord@@QAE@XZ
?lastInsertId@QSqlQuery@@QBE?AVQVariant@@XZ
??0QSqlQuery@@QAE@VQSqlDatabase@@@Z
?prepare@QSqlQuery@@QAE_NABVQString@@@Z
?bindValue@QSqlQuery@@QAEXABVQString@@ABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z
?exec@QSqlQuery@@QAE_NXZ
?next@QSqlQuery@@QAE_NXZ
?value@QSqlQuery@@QBE?AVQVariant@@H@Z
??1QSqlQuery@@QAE@XZ
??0QSqlDatabase@@QAE@ABV0@@Z
dpb3
??4DownloadInfo@DPB@@QAEAAV01@ABV01@@Z
??0DownloadInfo@DPB@@QAE@XZ
??1DownloadInfo@DPB@@QAE@XZ
??0DownloadInfo@DPB@@QAE@ABV01@@Z
shlwapi
SHDeleteKeyW
kernel32
FreeLibrary
LoadLibraryW
GetSystemTimeAsFileTime
GetProcAddress
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
advapi32
RegDeleteKeyW
RegQueryInfoKeyW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegEnumValueW
RegEnumKeyExW
RegCreateKeyExW
dpxlibrary
??0RecentFileInterface@MediaManagerInterface@DivXPlayerX@@QAE@XZ
??1PlaylistInterface@MediaManagerInterface@DivXPlayerX@@UAE@XZ
??1AcquiredFileInterface@MediaManagerInterface@DivXPlayerX@@UAE@XZ
??1QueuedFileInterface@MediaManagerInterface@DivXPlayerX@@UAE@XZ
??1VideoFileInterface@MediaManagerInterface@DivXPlayerX@@UAE@XZ
??0PlaylistInterface@MediaManagerInterface@DivXPlayerX@@QAE@XZ
??0VideoFileInterface@MediaManagerInterface@DivXPlayerX@@QAE@XZ
?getDesktopPath@OSUtilities@DivXPlayerX@@SA?AVQString@@XZ
??1RecentFileInterface@MediaManagerInterface@DivXPlayerX@@UAE@XZ
?getDivXMoviesPathDefault@OSUtilities@DivXPlayerX@@SA?AVQString@@XZ
??1MediaManagerInterface@DivXPlayerX@@UAE@XZ
?sendMessage@PubSubHub@DivXPlayerX@@SA_NABVQString@@ABVQVariant@@@Z
?getApplicationDataPath@OSUtilities@DivXPlayerX@@SA?AVQString@@_N@Z
??0AcquiredFileInterface@MediaManagerInterface@DivXPlayerX@@QAE@XZ
?getComponentIdUTF8@OSUtilities@DivXPlayerX@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0QueuedFileInterface@MediaManagerInterface@DivXPlayerX@@QAE@XZ
msvcp80
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
msvcr80
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
__RTDynamicCast
memmove_s
??_V@YAXPAX@Z
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_purecall
_invalid_parameter_noinfo
_CxxThrowException
memcpy
memset
??0exception@std@@QAE@ABV01@@Z
Exports
Exports
_getPlugin
Sections
.text Size: 212KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE