DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SvchostEntry_W32Time
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
5bbd2e5bd81ffb8918716ef8001327f1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
5bbd2e5bd81ffb8918716ef8001327f1_JaffaCakes118
Size
551KB
MD5
5bbd2e5bd81ffb8918716ef8001327f1
SHA1
f565a28f7ddf8e721d942e3939e63a35cec3d010
SHA256
2253c63e3554b89d5860448147cb2c6d591d586654e89e0ad0dceb3ad76c17d1
SHA512
6eda2c5024cd0e99e3d3084390bf86b001e98c5ced2257f708583d6724e20f45c97e7db0acc7cb68487c4cf6b6095aa8d92da757790785a0d377df41b8c4f82b
SSDEEP
6144:6Xg4MAR02cvZUpXW7NQOCd1hWp/n0RYvUBZK8CqAEyEpC9Ky7kiYTtoIwVdmldBX:8fM40BiXWxoLhFGNz2CIZoI/lvshT1W
Checks for missing Authenticode signature.
resource |
---|
5bbd2e5bd81ffb8918716ef8001327f1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SvchostEntry_W32Time
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.