Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e58d072800a8d89cea931fa784aaa899_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e58d072800a8d89cea931fa784aaa899_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e58d072800a8d89cea931fa784aaa899_JaffaCakes118
-
Size
5.1MB
-
MD5
e58d072800a8d89cea931fa784aaa899
-
SHA1
2f493844a5f9cd9cec7a9e0d8e388921069809e7
-
SHA256
e36f85b380fcff0dcee090f7f4397efcc60f8663e9b36b39ce8c08d2c618e0a4
-
SHA512
07a3e3f87bb2b62f179a5e43d6445c256cb546d439d6f0f978af9c86c6b34d030af0e5d4a2349c1927f03d3252c7ed2aa65b4d646d37258e5bb2089e22acc302
-
SSDEEP
98304:aCGlhlpTYpPDQv2mmb5UJgJN2lxD5jvK9aRZ0997GQahplj/xF95ZNMOYBb8LBIZ:y38fmmbVJN2lXLKkD0j7sLN/VyBIXIm4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e58d072800a8d89cea931fa784aaa899_JaffaCakes118
Files
-
e58d072800a8d89cea931fa784aaa899_JaffaCakes118.exe windows:4 windows x86 arch:x86
0d0b33a538b3565f449ee0941953cc72
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
advapi32
RegQueryValueExA
RegSetValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoUninitialize
comctl32
ImageList_SetIconSize
wininet
InternetGetConnectedState
Sections
.text Size: 48KB - Virtual size: 13.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE