?glopertw@@YAHXZ
?slqermw@@YAHXZ
DllRegisterServer
PluginInit
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e6afaa7501c3c20792878330c38f27e4_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e6afaa7501c3c20792878330c38f27e4_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e6afaa7501c3c20792878330c38f27e4_JaffaCakes118
Size
161KB
MD5
e6afaa7501c3c20792878330c38f27e4
SHA1
e2129aa677ee70da27561beeb29f1ceb01f4d1fc
SHA256
2416d293b86c725c2960746874c7863fa8b166735f3230d98f50640e5d111a99
SHA512
35122279c3f8895b186fefc469d9d232647e962d93027a5a53de260990b3ba15c35c2f822d2af7c060b67e50163ea85e480ee4df73d8954ecbb3f9ed115dec87
SSDEEP
1536:CY93h9npJAsRzAZavPK4lknkwidTiHetGnZUgThyQFYIoet+AhWBiuWCvtnqyhG8:rhLJAqzKPkVTiHe8eYnKVmQBcCG
Checks for missing Authenticode signature.
resource |
---|
e6afaa7501c3c20792878330c38f27e4_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
StrStrA
GetCurrentProcessId
GetCurrentThreadId
?glopertw@@YAHXZ
?slqermw@@YAHXZ
DllRegisterServer
PluginInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ