DllRegisterServer
DllUnregisterServer
PauseW
ResumeServer
ResumeW
StartServer
StartW
StopServer
StopW
SuspendServer
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
edc5fd90ab70a2e73243c06fbf4bbf42_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edc5fd90ab70a2e73243c06fbf4bbf42_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
edc5fd90ab70a2e73243c06fbf4bbf42_JaffaCakes118
Size
164KB
MD5
edc5fd90ab70a2e73243c06fbf4bbf42
SHA1
1f3d5c3a1469be724f54fa5b488dde5da3a0bc2c
SHA256
c0d47993f82059f010352d5f1dced0ffda0a7897f690a96225fa77dcb24987e8
SHA512
2df25cdfd508affc7c2c377a0ac490a3a3e845fc0b1d825799cd1925dc5cb98497edf38dc742d22cc1101407e74fa366017790b794422158d1425e488da270fb
SSDEEP
3072:cTltpXTmRUD82PbjCb5lcUpLhUf05x97bsqWpaM0fB8U6xcBwVSuU1E7YbqnOuOI:CuC7jj05CUpLhUsj97hM28xmwUuUKkbs
Checks for missing Authenticode signature.
resource |
---|
edc5fd90ab70a2e73243c06fbf4bbf42_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DllRegisterServer
DllUnregisterServer
PauseW
ResumeServer
ResumeW
StartServer
StartW
StopServer
StopW
SuspendServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ