DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
1894e4a1f8fdeda293e8e1efbfad09c7_JaffaCakes118.dll
Resource
win7-20240508-en
Target
1894e4a1f8fdeda293e8e1efbfad09c7_JaffaCakes118
Size
123KB
MD5
1894e4a1f8fdeda293e8e1efbfad09c7
SHA1
1cd07f239ee235c9092c7ba7a51fcc80b53adad6
SHA256
2916f49ce448bc1cc2e7c36adb9e32ab0aa7a2ecbe120917f9ceae4836549005
SHA512
1eda1efcd4112fff4dc4d964113e8fa1b9394adf32ec7356c76df80e74a34c592fc971fc5a25de2767f48e9ae060ba17fdaa648c88fe31f65c5424aa34c5378b
SSDEEP
3072:ymYhY1Rut9zvQD54I1eslXkECSR6EZbTJGeS2de:ghiROzvaj5lSSvbVRVI
Checks for missing Authenticode signature.
resource |
---|
1894e4a1f8fdeda293e8e1efbfad09c7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
OpenSCManagerA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.