Gbji
Whhxwtrxr
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e7a0a813b19d0dd2e1f8dad005d39fc9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e7a0a813b19d0dd2e1f8dad005d39fc9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
e7a0a813b19d0dd2e1f8dad005d39fc9_JaffaCakes118
Size
125KB
MD5
e7a0a813b19d0dd2e1f8dad005d39fc9
SHA1
398487f0480dd4c8534aaec20a006fab6571fdb0
SHA256
5661791ee5a9487ac09e41626b1205343377a3e0ddfb13892fab9e267737a3d9
SHA512
e7db1627fe102186084c890358615a75bb4a2fc27ae64e814698e2e0ae4cc764b9f0e3052e3b7c429c1e633d8f19aa44f4376f28838035597cacf4b9bbd8cbd3
SSDEEP
3072:Df+QKbI9xJx8V4lUQBhcuMojbKe6rG8D/x0Q9aLx:TmbWBG4FSqbru5D/uQ9
Checks for missing Authenticode signature.
resource |
---|
e7a0a813b19d0dd2e1f8dad005d39fc9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CloseHandle
EnterCriticalSection
EnumResourceLanguagesA
ExitProcess
GetACP
GetCommandLineA
GetLocalTime
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringA
GetStartupInfoA
HeapAlloc
LeaveCriticalSection
RtlUnwind
SetUnhandledExceptionFilter
TlsGetValue
VirtualFree
lstrcmpA
lstrcmpiA
lstrcpynA
IsCharUpperA
FillRect
EqualRect
EnableWindow
DrawTextA
DispatchMessageA
DeleteMenu
LoadBitmapA
CreateIconFromResource
CreateIcon
CreateDialogParamA
CreateDialogIndirectParamA
CreateDesktopW
CreateAcceleratorTableA
CharToOemBuffA
CharNextA
OemToCharA
CreateIconFromResourceEx
RegQueryValueA
RegOpenKeyExA
RegEnumKeyA
LsaClose
LsaCreateAccount
LsaCreateSecret
LsaDelete
LsaEnumerateAccounts
LsaEnumerateAccountsWithUserRight
LsaEnumeratePrivileges
LsaEnumeratePrivilegesOfAccount
LsaEnumerateTrustedDomains
LsaEnumerateTrustedDomainsEx
LsaFreeMemory
LsaGetQuotasForAccount
LsaGetRemoteUserName
LsaGetSystemAccessAccount
LsaGetUserName
LsaICLookupNames
LsaLookupNames
LsaLookupPrivilegeDisplayName
__vbaFileCloseAll
__vbaFailedFriend
__vbaExitProc
__vbaExitEachVar
__vbaCyVar
__vbaCyI4
__vbaCyI2
__vbaCyForNext
__vbaCyErrVar
__vbaCyAdd
__vbaCyAbs
__vbaCopyBytesZero
__vbaAryVar
__vbaAryCopy
DirectInputCreateA
DirectInputCreateW
Gbji
Whhxwtrxr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ