Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d93422d90afdd0bb98893b7418963b69_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d93422d90afdd0bb98893b7418963b69_JaffaCakes118
-
Size
204KB
-
MD5
d93422d90afdd0bb98893b7418963b69
-
SHA1
27f57edcbbd9a29f8d4994b2e77402d8a30698ad
-
SHA256
ad219579cd97d410613bfd4f5ea9564d13752ccba374bc15babddad4816900d5
-
SHA512
67cf52367576b165d088abdcd8a8f01147f7dc69e1d731d076e3a9f08ba87ccf4b98f376f8e552aacb586c2dd416ab4e71320225bf633821a23c1bc44ca13cc3
-
SSDEEP
3072:OCdA92OA0glhzjGHAf52ytrNitLcCo/yKi0DAYf0H:OCdA92OABMglfMMpUYf0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d93422d90afdd0bb98893b7418963b69_JaffaCakes118
Files
-
d93422d90afdd0bb98893b7418963b69_JaffaCakes118.exe windows:5 windows x86 arch:x86
73546fc2fe78400613240534ef8cc024
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winscard
SCardGetStatusChangeA
kernel32
RequestWakeupLatency
SetHandleCount
GetCommMask
GetSystemTimeAsFileTime
GetThreadPriorityBoost
IsSystemResumeAutomatic
GetProcessShutdownParameters
GetConsoleProcessList
GetSystemTime
GetThreadUILanguage
DeleteTimerQueue
TzSpecificLocalTimeToSystemTime
GetConsoleScreenBufferInfo
GetCommandLineA
gdi32
GetWorldTransform
GetClipRgn
CreatePalette
SetMapperFlags
user32
GetParent
ValidateRect
wvsprintfA
SetDlgItemInt
GetAncestor
GetMessageTime
GetSubMenu
IsWindowVisible
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CODE Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ