Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
2a4fd922140aca6f35fbf95a0976b7f5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2a4fd922140aca6f35fbf95a0976b7f5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2a4fd922140aca6f35fbf95a0976b7f5_JaffaCakes118
-
Size
265KB
-
MD5
2a4fd922140aca6f35fbf95a0976b7f5
-
SHA1
9d80c7799604c393b13cae44d52bf3c00a48982d
-
SHA256
08e3506338582147f8c430e5654cf9edac93ec8b0058624445279a8caedd0a11
-
SHA512
ee6860cee1b41321585be5b490f9bff496be5e17441042ddcdf253b6a25af799b55043e255e5a5354fd08c22832efd3764227a3fd6eb9ac0e1e53ed7c899ac79
-
SSDEEP
3072:6MHZ1WW5LewwCPoYwYefysW3LQxP6nb2m059CSF:FHvoCPopYefyh3L8ms
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a4fd922140aca6f35fbf95a0976b7f5_JaffaCakes118
Files
-
2a4fd922140aca6f35fbf95a0976b7f5_JaffaCakes118.exe windows:5 windows x86 arch:x86
1b9aa5115672bca10465258164075c45
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomW
EnumTimeFormatsW
FindAtomW
GetProcAddress
SetMailslotInfo
GetThreadSelectorEntry
GetCPInfo
LoadLibraryW
lstrcpyA
WriteConsoleOutputCharacterW
LocalAlloc
GetExitCodeThread
FatalExit
TerminateProcess
GetLastError
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
FindCloseChangeNotification
GetCurrentDirectoryW
FindFirstChangeNotificationA
SetLastError
HeapFree
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
SetStdHandle
CloseHandle
CreateFileA
LoadLibraryA
GetACP
GetOEMCP
IsValidCodePage
SetEndOfFile
GetProcessHeap
ReadFile
HeapSize
user32
PeekMessageW
GetDlgCtrlID
LoadCursorFromFileA
LoadImageA
LoadStringW
ScrollWindow
CreateWindowExA
LoadIconA
LookupIconIdFromDirectoryEx
GetMonitorInfoW
GetUpdateRect
SetParent
SetThreadDesktop
gdi32
CreateCompatibleDC
SetViewportOrgEx
CreateCompatibleBitmap
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 151KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ