DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
fd8a4dd41eaf64f0929a6d942a35e728_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd8a4dd41eaf64f0929a6d942a35e728_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fd8a4dd41eaf64f0929a6d942a35e728_JaffaCakes118
Size
24KB
MD5
fd8a4dd41eaf64f0929a6d942a35e728
SHA1
3c68d83744cda467f208a33709faca0e7957b6a0
SHA256
8ed9a3a3bbf2363e7e98db7bbc68c8762c7d043d3fbdb5406fb1a4af00b77008
SHA512
c8ddab82f5a8968a9760a0e10ec0f8350c076b6103415f482e67ea1e05c4a9a71f5b73d607d41648060fed8feba74c12f9bd99056be1d926772d442c1dd1de91
SSDEEP
384:YcxGd73MN7GhlWgcPLg4oYf1Io6DOXbVp6W6hgiUQT2GHI2uq17uCsp425pZQ9Q4:ZKhEfetQVeiiVTxzudVD7Z4/p
Checks for missing Authenticode signature.
resource |
---|
fd8a4dd41eaf64f0929a6d942a35e728_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetModuleHandleA
VirtualAlloc
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
lstrcpyA
ReadFile
CreateFileA
CreateThread
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
LoadLibraryA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
lstrcmpA
Sleep
VirtualProtect
CloseHandle
OutputDebugStringA
RtlUnwind
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
FindWindowA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
shutdown
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ