Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d6e2002e92dd7f2a6c8f56e6b9830c55_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
d6e2002e92dd7f2a6c8f56e6b9830c55_JaffaCakes118
-
Size
93KB
-
MD5
d6e2002e92dd7f2a6c8f56e6b9830c55
-
SHA1
3d00c73ab48aafc0dab6ff24790844229303f0c9
-
SHA256
8c1f88da8f4519a169e6547aa847c5fc95265186775b044293d6e1888c5af140
-
SHA512
eca77be4cf186a5d83a7465d8837b106e9a12cf95edd33aef4f3a01449013db9add78371bb662d65bb9e2b0b9641380a906093c8e6645523f1f925d2db595cd7
-
SSDEEP
1536:iPKirFSX/zGWmMwdCdDQq7umjMpMBnVyfhq4RfmKKaMGu:x3vzGowdCdJ7TmLJmXf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6e2002e92dd7f2a6c8f56e6b9830c55_JaffaCakes118
Files
-
d6e2002e92dd7f2a6c8f56e6b9830c55_JaffaCakes118.exe windows:5 windows x86 arch:x86
50d73ed398e62d515e6d56df847c90bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
BeginPaint
IsDlgButtonChecked
SetWindowTextA
LoadIconA
LoadCursorA
RegisterClassExA
GetClipboardViewer
GetWindowLongA
CheckDlgButton
EnableScrollBar
EndPaint
gdi32
CreatePatternBrush
CreateRectRgn
SetBkMode
DeleteObject
SetMapMode
GetStockObject
ole32
CoIsOle1Class
CoUnmarshalHresult
CoGetStandardMarshal
StgIsStorageFile
CoWaitForMultipleHandles
OleSetContainedObject
kernel32
QueryPerformanceCounter
GetFileAttributesA
GetCommandLineA
GetLastError
LeaveCriticalSection
EnterCriticalSection
GetACP
InterlockedDecrement
HeapFree
HeapDestroy
InitializeCriticalSection
GetModuleHandleA
GetStartupInfoA
HeapAlloc
HeapCreate
DeleteCriticalSection
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE