EPLoadMSO
EPMsoGimmeFile
EPMsoGimmeFileByName
EPMsoLoadLibrary
EPMsoLoadLibraryByName
SetupGimme
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4a7628b45d37791ae0423200c86862f0.dll
Resource
win7-20240729-en
Target
JaffaCakes118_4a7628b45d37791ae0423200c86862f0
Size
124KB
MD5
4a7628b45d37791ae0423200c86862f0
SHA1
3f475019db1d7511f75809ea6fbd46f281b0b8be
SHA256
57d91da50de1866d27cc5b8167532aa8023e3e323d1d00caa6d7b5786361cd63
SHA512
2d36f66cf252f87004784714619504f9ac54a5926daac68598086f1a9968dfcf7cb2b8877b92707e12d473ceefd67c8ca910d289a3d7d8e8af395bc66713450d
SSDEEP
3072:BN1fByy2rkDmdRStHqhZ8Rnf9aUfgXrrJ:BNZj6dRStkaf2rN
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_4a7628b45d37791ae0423200c86862f0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_except_handler3
_initterm
free
_stricmp
InterlockedExchange
FreeLibrary
LocalAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryA
LoadLibraryA
DisableThreadLibraryCalls
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
LoadLibraryW
LoadLibraryExW
GetSystemDirectoryW
GetLastError
GetTickCount
TerminateProcess
GetCurrentProcess
RaiseException
SetUnhandledExceptionFilter
QueryPerformanceCounter
RegOpenKeyExW
RegQueryValueExW
StringFromGUID2
EPLoadMSO
EPMsoGimmeFile
EPMsoGimmeFileByName
EPMsoLoadLibrary
EPMsoLoadLibraryByName
SetupGimme
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE