DllStart
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
a1d134b756dbfa6daec8694b0e88dd32_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
a1d134b756dbfa6daec8694b0e88dd32_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
a1d134b756dbfa6daec8694b0e88dd32_JaffaCakes118
-
Size
220KB
-
MD5
a1d134b756dbfa6daec8694b0e88dd32
-
SHA1
7233543c841fb0ae3da20888f5502b24cbf85ece
-
SHA256
05a485884308d8395f1605a3fa21e6167a1d8b17b5e5776860f37f3b84784a41
-
SHA512
95c0cb401a155a97b3ab38b466bbb0ebb6e67672d58b5553db02fddaa388b20292b660ecafac12ab30be8b4418a2278fc91ea10ef15526a3b5fbad3b5296a5df
-
SSDEEP
6144:DnPo/W4nDWgRAkPYxce/a9zH2QmOY6xWa:DnPoTR3PYxax26xWa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1d134b756dbfa6daec8694b0e88dd32_JaffaCakes118
Files
-
a1d134b756dbfa6daec8694b0e88dd32_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.textbss Size: - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 284B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 72B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ