DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e43af739d8c6b0284f961a6ac3b055a0_JaffaCakes118.dll
Resource
win7-20241010-en
Target
e43af739d8c6b0284f961a6ac3b055a0_JaffaCakes118
Size
804KB
MD5
e43af739d8c6b0284f961a6ac3b055a0
SHA1
8ffcaa3a43460132898f5662f18d870b1b262b0e
SHA256
340c9cca533d419fd91da066cd89a0000c1aa96700ced431701f9950403e81c9
SHA512
c976598ee93ad6728b24d865d706781707bee3c6f02ae57190e048bc67d4636a5d90f89607e4d523350ae8864c34c9faa58faa5f6a3128bbb9a7dd2bacb3f0db
SSDEEP
12288:t6wseXyl8eHx0Tos+QY+TviT1Lj6V99mqDuWCSsmj7:t6wseXyl8eHx0Tos+p+6+DuWCSN
Checks for missing Authenticode signature.
resource |
---|
e43af739d8c6b0284f961a6ac3b055a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
timeGetTime
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
RegCreateKeyA
RegSetValueA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
GetModuleFileNameA
GetUserDefaultLangID
GetSystemDefaultLangID
InterlockedIncrement
FreeLibrary
InterlockedDecrement
LoadLibraryA
GetVersionExA
DisableThreadLibraryCalls
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
GetCurrentProcess
GetCurrentThreadId
VirtualAlloc
VirtualFree
lstrlenA
MultiByteToWideChar
GetLastError
GetProcAddress
GetModuleHandleA
WideCharToMultiByte
GetACP
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
HeapReAlloc
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
ExitProcess
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetCPInfo
GetOEMCP
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
FreeEnvironmentStringsW
BeginPaint
SetCursor
LoadStringA
LoadCursorA
EnableWindow
ShowWindow
GetDesktopWindow
LoadBitmapA
FillRect
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
PostMessageA
GetWindowLongA
SetWindowLongA
EndPaint
MoveWindow
InvalidateRect
DestroyWindow
DefWindowProcA
wsprintfA
LoadStringW
SendMessageA
GetDlgItem
CreateDialogParamA
GetUpdateRect
BitBlt
GetObjectA
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
DeleteObject
CoFreeUnusedLibraries
CoInitialize
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE