Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
84b95559a8cbf299a86c32acfa08a450_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
84b95559a8cbf299a86c32acfa08a450_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
84b95559a8cbf299a86c32acfa08a450_JaffaCakes118
-
Size
157KB
-
MD5
84b95559a8cbf299a86c32acfa08a450
-
SHA1
a2eecfc6b2b51ffb6741d71581d6f9ba27945533
-
SHA256
725f0ad95fd4e90ce0718ae9d358d49aff009fe6e1c76149e266abab605da2fd
-
SHA512
c15b2e2230fc55056d782e30b8f4461e5084a43b8d6c0dd8b00b74e9ac32db29cd7030bdbf9c6474864bc2087f20e2b02ce1103ef7d81c70777c5e49585a97a2
-
SSDEEP
3072:p2xGV/ka1+uMgq8EIRg4YvHrtofjjIaMOhk7A08vhmkw:p28V/1vM8g4OHrtiFMEkqJJw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84b95559a8cbf299a86c32acfa08a450_JaffaCakes118
Files
-
84b95559a8cbf299a86c32acfa08a450_JaffaCakes118.exe windows:5 windows x86 arch:x86
02a5bae9a8b75693e1b53d76650592c1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GlobalMemoryStatus
LocalAlloc
GetProcessAffinityMask
GetProcessTimes
GetProcessWorkingSetSize
SetProcessWorkingSetSize
GetCurrentProcessId
TerminateProcess
GetLastError
GetFileSize
GetFileSizeEx
CompareFileTime
lstrcpyA
lstrcpyW
LoadLibraryW
GetProcessShutdownParameters
GetTempPathA
GetCPInfo
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
OutputDebugStringW
HeapReAlloc
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
LeaveCriticalSection
EnterCriticalSection
EncodePointer
DecodePointer
IsProcessorFeaturePresent
RaiseException
RtlUnwind
GetCommandLineA
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
SetLastError
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
CreateFileW
user32
ShowScrollBar
SetPropA
EndPaint
BeginPaint
PostMessageW
CopyImage
LoadImageW
DestroyIcon
GetPropW
shell32
ShellExecuteA
winhttp
WinHttpOpen
WinHttpCloseHandle
WinHttpWriteData
WinHttpQueryOption
WinHttpCreateUrl
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mysec Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ