AR
GetVer
HTTPSendStrFun
w
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
083930873d0195621f94beeaf3cbe770_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
083930873d0195621f94beeaf3cbe770_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
083930873d0195621f94beeaf3cbe770_JaffaCakes118
Size
60KB
MD5
083930873d0195621f94beeaf3cbe770
SHA1
0001b76ab0c3cf33aa41eed712bf645987f83e3e
SHA256
de04c5dbad31237d53a069d334a0110844bf3c094d941fe788c7377a8044789a
SHA512
05534614c772fe3bafdadccd22feb8e8c626a2e15cd536f3362d8d9ff330955857b3e7474ef556eb6940957869ed46bf0691e3f1235e70185c8724ea54652867
SSDEEP
768:3d8faMrfBbAIsJJYPVugZlkFnToIf1iZd6olc:3d8fTrZ8IsJkjZlkFnToIfSkol
Checks for missing Authenticode signature.
resource |
---|
083930873d0195621f94beeaf3cbe770_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
GetModuleFileNameA
CloseHandle
GetCurrentProcess
GetStringTypeA
GetTempPathA
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetBinaryTypeA
WinExec
DeleteFileA
GetStringTypeW
GetTickCount
Sleep
LoadLibraryA
GetModuleHandleA
GetProcAddress
lstrcmpiA
GetVersionExA
LCMapStringW
GetSystemInfo
GetMessageA
TranslateMessage
DispatchMessageA
GetSystemMetrics
CallNextHookEx
CharLowerA
wsprintfA
SetWindowsHookExA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
setsockopt
recv
send
sendto
recvfrom
closesocket
socket
inet_addr
htons
connect
gethostbyname
WSAStartup
strchr
_access
rename
strncmp
atoi
??2@YAPAXI@Z
_splitpath
malloc
free
_adjust_fdiv
sprintf
_except_handler3
strstr
_initterm
AR
GetVer
HTTPSendStrFun
w
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ