FreeGlobalObjects
GetContextSpellingSession
GetNextToken
RunCssWordBreaker
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_142cce6c8e06744bc0cbd5425c309f4f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_142cce6c8e06744bc0cbd5425c309f4f.exe
Resource
win10v2004-20241007-en
Target
JaffaCakes118_142cce6c8e06744bc0cbd5425c309f4f
Size
2.8MB
MD5
142cce6c8e06744bc0cbd5425c309f4f
SHA1
16c16dcc37cf688cdbc96c9e3be126e06a4a3942
SHA256
3b31c8cce7b8a24dd175a06ffd23aa21a2eb37415fe8a7b0876ecb8865f6a9fc
SHA512
b42b832bad0130af5b4e104883e92d87c647fd55a8ee166cf761632ab5b6ee43a0afea8622f133df73defcf86326e109d17cb523c47e9deb5964e5c5a9f805c1
SSDEEP
49152:/2W7bHP6W59tEEz3R/N9KZV8ora4hkz4HVXZ4:eov6Stpz35OZCj4hkz41J
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_142cce6c8e06744bc0cbd5425c309f4f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DeregisterEventSource
GetTokenInformation
LookupAccountSidW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegisterEventSourceW
ReportEventW
DeleteObject
CloseHandle
CompareStringW
CreateEventW
CreateFileMappingW
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindNextFileW
FindResourceExW
FindResourceW
FlushFileBuffers
FormatMessageW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesW
GetFileSize
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetPriorityClass
GetProcAddress
GetProcessHeap
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultLCID
GetUserDefaultUILanguage
GetVersion
GetVersionExW
GlobalAlloc
GlobalFree
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MoveFileW
MultiByteToWideChar
OpenMutexW
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReleaseMutex
ReleaseSemaphore
SearchPathW
SetEvent
SetLastError
SetPriorityClass
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiW
lstrlenA
lstrlenW
ord109
StgOpenStorageOnILockBytes
PropVariantCopy
PropVariantClear
CreateStreamOnHGlobal
CoWaitForMultipleHandles
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoCreateInstance
CLSIDFromString
CoUninitialize
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
UnRegisterTypeLi
VarUI4FromStr
VariantClear
VariantInit
RegisterTypeLi
LoadStringW
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
CharNextW
FreeGlobalObjects
GetContextSpellingSession
GetNextToken
RunCssWordBreaker
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ