Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
9900da3b47a84eeb14f762359c3c0f38_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9900da3b47a84eeb14f762359c3c0f38_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9900da3b47a84eeb14f762359c3c0f38_JaffaCakes118
-
Size
250KB
-
MD5
9900da3b47a84eeb14f762359c3c0f38
-
SHA1
76c40c2107892f6ada8b4b231659b914bb3b49b4
-
SHA256
5629215f0583fd1a92b2f4fc2de1bdf11bd94cb30401ab914276b9ba0a392fcb
-
SHA512
f587339d8c4494caba5265b2416c078f50a2b1729fffc1948900115b110dd41211f945ed1ffd1ddb63bdd053e667d5296d71dab9c255df7803c23b0367795a1f
-
SSDEEP
6144:xWlntlLlejLP4TIlNnvj5rTzu6ALMBgWdq:ETcjLP4irBF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9900da3b47a84eeb14f762359c3c0f38_JaffaCakes118
Files
-
9900da3b47a84eeb14f762359c3c0f38_JaffaCakes118.exe windows:5 windows x86 arch:x86
ac6f3ca7f0f6eae2492df19693451181
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
VirtualProtectEx
FindAtomA
GetVolumePathNamesForVolumeNameA
GetModuleHandleA
GetLastError
GetCPInfoExA
AreFileApisANSI
GetConsoleOutputCP
GetCalendarInfoA
RaiseException
lstrcatW
SetFirmwareEnvironmentVariableA
FlushFileBuffers
CloseHandle
CreateFileA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetCPInfo
RtlUnwind
LCMapStringA
LCMapStringW
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoW
SetStdHandle
WriteConsoleA
WriteConsoleW
gdi32
GetDCBrushColor
advapi32
ReportEventA
ole32
CoMarshalInterface
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ