C:\wafe_zig\xoluf-cawij-xici\pixevomes_suha_hocayifuc.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
9f8a475abce8ee5d836319045b20b65d_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
9f8a475abce8ee5d836319045b20b65d_JaffaCakes118
-
Size
3.9MB
-
MD5
9f8a475abce8ee5d836319045b20b65d
-
SHA1
89eeee314fd0f4a1bb48a24ed37cb985897660f3
-
SHA256
807457fd6828a6c089bfe1808dd9b21c3820fad6e54e18b517cb0bbd38abc42a
-
SHA512
1f4426cbd2b441e9ae1e1c0f473a97a71b8d1a4eac47743a26c2d7fa64441e59aeb5d9c88c9362a0a7f63a11ffd2a2713f2a3818ce46af3982df3289051f720c
-
SSDEEP
98304:IzkDz5Z5gxwn2hPMW35eQ7Cr56fWHd2JID4VV2iwbZ:+kDb5gaOj35u6fWHd2JIqV5QZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f8a475abce8ee5d836319045b20b65d_JaffaCakes118
Files
-
9f8a475abce8ee5d836319045b20b65d_JaffaCakes118.exe windows:5 windows x86 arch:x86
954d144a00c7870cefb9ec12107fd2d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GlobalAlloc
lstrcatA
WritePrivateProfileStringW
GlobalUnlock
GetLastError
GetProcAddress
GetModuleHandleW
SetComputerNameA
RegisterWaitForSingleObjectEx
DebugSetProcessKillOnExit
GetSystemRegistryQuota
GetTempPathA
UnregisterWaitEx
LocalFileTimeToFileTime
FindFirstFileExW
GetUserDefaultLCID
HeapAlloc
LoadResource
GetLocaleInfoA
lstrlenA
CloseHandle
CreateFileW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetACP
GetOEMCP
IsValidCodePage
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryW
SetStdHandle
WriteConsoleW
FlushFileBuffers
msimg32
TransparentBlt
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ