Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e2c334e419f98a1217912316e0c797a7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e2c334e419f98a1217912316e0c797a7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e2c334e419f98a1217912316e0c797a7_JaffaCakes118
-
Size
721KB
-
MD5
e2c334e419f98a1217912316e0c797a7
-
SHA1
d1f3bd5f3eed207fce7e447efba5cc87d02d989a
-
SHA256
1d9c7a3f4db08b60d9995027535db917e83f51c2e4f56d5fc862456a314203f6
-
SHA512
53c9b91205095bc4d3c40e7d3265a6c39b0952282df4fa71de3f6857b1bbd4a5cdfbcc74e689104d303f0cc75b3708e64e2bc5fb06581efb7a4134f7411de4f1
-
SSDEEP
12288:+D0c7zRDGWLYsAkdMa3JLi779XzZt58eKpieycV74SxV9Xwd:fK1DGixLi7Lv8eKDV7RV9Xm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2c334e419f98a1217912316e0c797a7_JaffaCakes118
Files
-
e2c334e419f98a1217912316e0c797a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
748e982395d3839a5dcf9f32a043dab3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
FindClose
FindFirstFileW
GetLocaleInfoA
GetVolumeInformationW
GetFullPathNameW
CreateFileW
SetErrorMode
GetVersionExW
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetStdHandle
msvcrt
_initterm
_iob
pow
fprintf
?terminate@@YAXXZ
free
exp
_initterm
malloc
_adjust_fdiv
exit
_CIpow
_ftol
__CxxFrameHandler
_purecall
_except_handler3
msvfw32
ICInfo
ICOpen
ICSendMessage
ICClose
ICGetInfo
Sections
.text Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE