SetHook
Unhook
Update
_CBTProc@12
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
b98d26d502f98170ced41c8a79266f5c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b98d26d502f98170ced41c8a79266f5c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b98d26d502f98170ced41c8a79266f5c_JaffaCakes118
Size
132KB
MD5
b98d26d502f98170ced41c8a79266f5c
SHA1
6632249a4ab8dc0ee73c4d088152f6c70ad7e54c
SHA256
07ba862e4932427edc888ce89a19362b2ba03532ca8532b9ed531b4d6531b982
SHA512
4831f875f3136f6705e230417ea092ab967c0b3a4c045686e399593325eac1f255c7ff3f7c3d66c417cc974d0aabbf2466da577c99cd6e32a26a7b91d8b02820
SSDEEP
3072:mfvikUBClPed2GT3FMbxlALn1PRKZ7DQBeYoTBfJuTaEyQ6:8qulPed2CVMPAL1PMc3oTBRuBy
Checks for missing Authenticode signature.
resource |
---|
b98d26d502f98170ced41c8a79266f5c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetHook
Unhook
Update
_CBTProc@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.