Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e337cdb033ec12d89f2d4ee6a909d1e2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e337cdb033ec12d89f2d4ee6a909d1e2_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
e337cdb033ec12d89f2d4ee6a909d1e2_JaffaCakes118
-
Size
790KB
-
MD5
e337cdb033ec12d89f2d4ee6a909d1e2
-
SHA1
7c02b0a9cb2a359b0ffb6ec861ca095d061846f8
-
SHA256
59483ae7f1d5768b673c344c4e25873fcfa8d8ffc641471ad326b9193f97c92b
-
SHA512
fb743ada6442cb915029947b5b5163563567d650f6ba98d3ea0697a9711a8984677bedc1653e1ff2abae03da810dbda4e4069f2df84819bde2a585622b6b1551
-
SSDEEP
12288:PrYIZ9VeEOHgeL0VPQYmHyjKJo8WsSznFqJJFSYqffZENWernAlZ:sIZ9VJOAe8PQTSjmoFnkJiYq3W4erA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e337cdb033ec12d89f2d4ee6a909d1e2_JaffaCakes118
Files
-
e337cdb033ec12d89f2d4ee6a909d1e2_JaffaCakes118.exe windows:6 windows x86 arch:x86
47ad0e9e5c1fddc300ab5055bca911fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
kernel32
SetEnvironmentVariableA
SetLastError
EnterCriticalSection
MapViewOfFile
GlobalReAlloc
GetTimeZoneInformation
DuplicateHandle
lstrcpyW
GetVersionExW
GetUserDefaultLCID
UnmapViewOfFile
ExitProcess
VirtualProtect
CreateMutexA
IsBadReadPtr
OutputDebugStringA
EnterCriticalSection
SetFilePointer
GetStartupInfoW
LocalFileTimeToFileTime
FindNextFileA
FindFirstFileA
GetModuleHandleA
VirtualFree
GetModuleHandleA
PulseEvent
lstrcpynA
lstrcpyA
GetProcAddress
GetModuleHandleA
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 913B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 769KB - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ