?LormDelete@@YGXUverifyEw@CA7
?LormSelect@@YGXUverifyEw@CA7
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d63668d2cafaad99753303fad0b68f40_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d63668d2cafaad99753303fad0b68f40_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
d63668d2cafaad99753303fad0b68f40_JaffaCakes118
Size
94KB
MD5
d63668d2cafaad99753303fad0b68f40
SHA1
33ba3c7ac6974cb138080966c0e5c8df1b43cfc9
SHA256
45badd1d6276d13c97a0254513145f71df45acfbc3a393fad5329a02e7431df8
SHA512
29327a9eda0812ebaccdca66b7ef658e33dceea5759b83e96f752070260afd509f12d73fec40d2c427bef8ef26800b4401bcbe4207d7876c696ad94a4d9594e9
SSDEEP
1536:Qq7Ng88hoJrQCNH1an5f6wsMvjvC46uhwAd8zLfnQfaEWuXH7l60m:Qq7NgbhopTH1an5f6wXvj646KdkfRVqo
Checks for missing Authenticode signature.
resource |
---|
d63668d2cafaad99753303fad0b68f40_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrCSpnA
StrToIntW
StrPBrkW
PathGetDriveNumberA
PathIsSameRootA
PathIsRootW
PathMakePrettyA
PathIsPrefixA
UrlCompareA
UrlGetPartA
ChrCmpIA
lstrcatA
GetClassLongA
GetActiveWindow
GetProcessWindowStation
LoadBitmapA
IsMenu
IsCharLowerA
?LormDelete@@YGXUverifyEw@CA7
?LormSelect@@YGXUverifyEw@CA7
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ