Y:\sTzHfsz\zifGjnk\glabz\OlFF\jLesev.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
81cbec1007b0e73d3928a70e3942c686_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
81cbec1007b0e73d3928a70e3942c686_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81cbec1007b0e73d3928a70e3942c686_JaffaCakes118
-
Size
200KB
-
MD5
81cbec1007b0e73d3928a70e3942c686
-
SHA1
70115b899a4c41a5a036b369cfe2374c6cc62001
-
SHA256
487f4e09df11d865e63fed8d0a92540591bd82a133e9ff7b3218bde78231fc60
-
SHA512
eb8a3c884685fae9b6b71599f4ac59778ca49afe28a7cba3e6880b980818ec4b3e190159c8e220d4c69f21786bf8c69b0d6b2b4c641f0c482c485678265ffcd9
-
SSDEEP
3072:xoPjHXkZCTAYKAf5HET9U4sUbHJo3/qL9H/zzX2N6r22+OT7mUY2f8V7HQg4K:2PjHdV4U4x96M/zzLr2AHmU0ZH+K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81cbec1007b0e73d3928a70e3942c686_JaffaCakes118
Files
-
81cbec1007b0e73d3928a70e3942c686_JaffaCakes118.exe windows:5 windows x86 arch:x86
1522d8f22e2716b5a1b3bdbe4d4f668c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetWindowRect
LookupIconIdFromDirectory
GetKBCodePage
MapVirtualKeyExA
TileWindows
LoadBitmapW
GetForegroundWindow
BeginDeferWindowPos
GetAsyncKeyState
GetCaretBlinkTime
GetMonitorInfoW
VkKeyScanExA
FrameRect
TrackPopupMenuEx
gdi32
GetClipBox
TranslateCharsetInfo
SetWindowExtEx
GetDIBits
GetROP2
GetViewportOrgEx
CreateSolidBrush
shlwapi
PathRemoveArgsW
ChrCmpIW
kernel32
SetTimerQueueTimer
SetHandleCount
MoveFileA
EnumSystemLocalesA
OpenMutexW
FindResourceA
HeapWalk
CreateSemaphoreW
GetCommProperties
MoveFileW
GetTickCount
MoveFileExW
ConvertDefaultLocale
Exports
Exports
?jfslfrnaGVq@@YGXI@Z
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 153KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ