DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
05bed58d3cb17310219b18a0dda59fa4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
05bed58d3cb17310219b18a0dda59fa4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
05bed58d3cb17310219b18a0dda59fa4_JaffaCakes118
Size
15KB
MD5
05bed58d3cb17310219b18a0dda59fa4
SHA1
1824ea6d262f9ef462d0d6569c91ba9fa28877ce
SHA256
d8f0e9228640ec480a458b83137c2ac2fa7d6b10a6356ea0dc80e87c47006105
SHA512
a0ed9f56707a23bcc7ee07f7cfe556ac254c95ddafb13042ce21ad2c5a5e4f46a13166dd55c20294856540fb8758b69d4e657a5164ea6069904843cd55b90c05
SSDEEP
192:V0GNV6r7DOSF5CurjUDEbhPgkNwVMKuLdCJv2nTHolxb9i4p5CYSX0qJxLLR7R7m:CG/w7KSFAKUDAZNwRKIlxbY0qJx/peD
Checks for missing Authenticode signature.
resource |
---|
05bed58d3cb17310219b18a0dda59fa4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualProtect
Sleep
lstrcmpA
lstrcpyA
lstrcatA
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetPrivateProfileIntA
GetSystemTime
WritePrivateProfileStringA
CloseHandle
ReadFile
CreateFileA
SetFilePointer
GetModuleFileNameA
CreateThread
UnmapViewOfFile
OutputDebugStringA
LoadLibraryA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
RtlUnwind
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
CallNextHookEx
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetCloseHandle
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
shutdown
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ