DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRemoveTimeDll
DllSetTimeDll
DllTimeProc
DllUnregisterServer
SvchostEntry_W32Time
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_981ff976326044c8f969fe97852537fc.dll
Resource
win7-20240903-en
Target
JaffaCakes118_981ff976326044c8f969fe97852537fc
Size
227KB
MD5
981ff976326044c8f969fe97852537fc
SHA1
ce063061c35ae78f0a84d0d86387d19328dc30bf
SHA256
eb0382e29995777b20915edae1eca7c784ce9dd6d4da1a73023e10a31657f830
SHA512
f2aba9b081d6794acdc0dfddb051b966a2a0c6a2cbb0671c8efda70e32bc0ee7d16f53e9bd0839654ba5a88204fa25b271aefdffa71f63e555d0571c6a404e8c
SSDEEP
6144:eCBdxCragihqe35q2ztpUaGtrftpx8tM57Pbb94dJH:eCrxCragoqequAPxP7d0
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_981ff976326044c8f969fe97852537fc |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRemoveTimeDll
DllSetTimeDll
DllTimeProc
DllUnregisterServer
SvchostEntry_W32Time
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE