Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
81cbbd29203f409791303bf2d1d394b0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
81cbbd29203f409791303bf2d1d394b0_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81cbbd29203f409791303bf2d1d394b0_JaffaCakes118
-
Size
56KB
-
MD5
81cbbd29203f409791303bf2d1d394b0
-
SHA1
ca8d2a6ab8690486b347182b809cd1ec8bb04e3f
-
SHA256
ff57b405669401e9762ee89e31729575edf185812ae732589558e343b401a70b
-
SHA512
418fa967911c788ace76f212863c674e63321c5bb9131f445ebba2b4ca1836638b009c8f06fda38206b1fa2e96ffe420e81f02b6ba69022d5de2928f3e809d56
-
SSDEEP
768:igt+Au03A38ooGWKdc6UQuS6cpV6rmcgJ2WLt7WG:i5PoGvn5pFpVkgvLt7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81cbbd29203f409791303bf2d1d394b0_JaffaCakes118
Files
-
81cbbd29203f409791303bf2d1d394b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a4795ef26814173817e68ad0c22c8e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
GetWindowsDirectoryA
DeleteFileA
lstrcatA
GetCurrentProcess
GetCPInfo
GetACP
GetStringTypeW
GetStringTypeA
SetEndOfFile
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
VirtualAlloc
CreateFileA
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetStdHandle
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
ReadFile
VirtualFree
GetOEMCP
SetHandleCount
RtlUnwind
GetFileType
HeapDestroy
HeapCreate
CloseHandle
WriteFile
HeapFree
GetLastError
SetFilePointer
oleaut32
SysFreeString
ole32
CoUninitialize
CoCreateInstance
CoInitialize
user32
GetSystemMenu
EnableMenuItem
SendDlgItemMessageA
PeekMessageA
DispatchMessageA
MessageBoxA
DestroyWindow
CreateDialogParamA
comctl32
ord17
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE