?LormDelete@@YGXUverifyEw@CA7
?LormSelect@@YGXUverifyEw@CA7
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
0c7606e3f2f8ae8b8b04b27392fc2be0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0c7606e3f2f8ae8b8b04b27392fc2be0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
0c7606e3f2f8ae8b8b04b27392fc2be0_JaffaCakes118
Size
95KB
MD5
0c7606e3f2f8ae8b8b04b27392fc2be0
SHA1
041e42a273c91aada00fa17ff08ca62a755fbd6b
SHA256
66473b4875a5acb6c72d45321335065839c7607678e0dd9bf028508895d96f9b
SHA512
6971700773c07bdd25c171daadab7efb8405b6b975b6bd9e71aa028429c7cae00506dbf23060418e6e2d37c3657a8af3b54ae79c3f4e9b99ecc8397aa3f426e1
SSDEEP
1536:cNEtQrCwzs6yO+s8iiUExoM/ygXNRxkusQRDV0sK1MbFUJno:cNPCwzDyFs8iyoM6gX5YQRB0sjad
Checks for missing Authenticode signature.
resource |
---|
0c7606e3f2f8ae8b8b04b27392fc2be0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PathGetDriveNumberW
StrCmpLogicalW
ord29
PathIsSameRootA
StrStrIW
StrPBrkA
PathIsRootW
UrlCompareA
PathGetCharTypeW
UrlGetPartA
ChrCmpIW
StrToIntA
lstrcatA
LoadBitmapA
IsMenu
IsCharLowerA
GetActiveWindow
GetProcessWindowStation
GetClassLongA
?LormDelete@@YGXUverifyEw@CA7
?LormSelect@@YGXUverifyEw@CA7
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ