_RemoveItem@4
_SecureMe@4
_TranslateText@8
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
4f44d11ad35c9fd9875f1b63b16209f1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4f44d11ad35c9fd9875f1b63b16209f1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4f44d11ad35c9fd9875f1b63b16209f1_JaffaCakes118
Size
91KB
MD5
4f44d11ad35c9fd9875f1b63b16209f1
SHA1
dcf0f1cb870f38bb914e8c8ee55d4b6815753115
SHA256
3da8e5e1337b9eca04e0c76ac7d85e313645f3d14ab49b565269a642ed1bb3d5
SHA512
4ca90698471f1f240224dd6b4113532c2d52c15828166ffcb569702dd70a4461c825805989254b84d65b5a07f2e30712225f4304a8c3b9597cdc59c08fa4549a
SSDEEP
1536:cfczbp1l7hTg/K75GmJWK5m6gGPrCGzIsq8g9/VN8DYnKtaVQZJ/740:GcPZhk0AmFO+rCGcsq1/V+DR0qZq0
Checks for missing Authenticode signature.
resource |
---|
4f44d11ad35c9fd9875f1b63b16209f1_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GdipReversePath
GdipGetLogFontW
GdipGetVisibleClipBounds
GdipGetClipBoundsI
GdipIsVisiblePoint
GdipCreateLineBrush
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromStream
GdipGetPathLastPoint
GdipAddPathLine
LocalFree
IsDebuggerPresent
LoadResource
SetHandleInformation
ReplaceFileA
GetHandleInformation
LockResource
FindNextFileA
GetFileAttributesExW
HeapReAlloc
HeapAlloc
CloseHandle
GetThreadContext
GetCPInfo
GetCurrentProcess
HeapFree
GetModuleHandleExW
GetSystemTimes
GlobalAlloc
VirtualFreeEx
Sleep
LocalReAlloc
TerminateProcess
CompareStringW
GetLastError
VirtualAllocEx
GlobalFree
GetLocalTime
GlobalMemoryStatusEx
GlobalHandle
EndPaint
BeginPaint
PeekMessageA
TranslateMessage
RegCloseKey
RegOpenKeyA
GetUserNameA
RegLoadKeyA
DuplicateToken
IsTextUnicode
RegUnLoadKeyA
OpenServiceW
OpenSCManagerW
OpenProcessToken
_RemoveItem@4
_SecureMe@4
_TranslateText@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ