AddFile
Init_CrashCatch
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_42de7faacee0b560792dbc0876bc9c00.dll
Resource
win7-20240903-en
Target
JaffaCakes118_42de7faacee0b560792dbc0876bc9c00
Size
180KB
MD5
42de7faacee0b560792dbc0876bc9c00
SHA1
c30c033840aeb2bfd49edcfe5fd653d2d21dd015
SHA256
741d0060909bc57c736f0e568cd53af960d11086e8072c80678dab9d72523e72
SHA512
9783aa7e44ea39bd21d20c4e9686cb8b99d93708984e0106143edf88c2852e39fae00c4e8913890933f07c65750e4edf69d47987eba9a78b105d5664bdadea85
SSDEEP
3072:HRCQ47Gvlbd4uaHfJFozSfKfXIkifKV1vWZgNQk0:sH2quWfiifKjWCNi
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_42de7faacee0b560792dbc0876bc9c00 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
SuspendThread
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
CreateFileA
SetUnhandledExceptionFilter
CompareStringW
CompareStringA
SetEndOfFile
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
FlushFileBuffers
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetFullPathNameA
GetCurrentDirectoryA
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
ShellExecuteA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
PathFileExistsA
AddFile
Init_CrashCatch
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE