Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
dd6883a7eda2fcb2433e23f4ad8b1fd4_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd6883a7eda2fcb2433e23f4ad8b1fd4_JaffaCakes118
-
Size
93KB
-
MD5
dd6883a7eda2fcb2433e23f4ad8b1fd4
-
SHA1
ce4e8a2d02c348b92d3f5937b3e08a7bbc5f3d82
-
SHA256
c1e78caad66e7da85c31af641dc74ab9740dd70824610de5975c66635070cffb
-
SHA512
e6dfa649d2e0dc790ebac6461846e26cdb424b9c4229b1fb52011faadc7bb9bbaca70f53dcf58ce8c48c2da9beea3930d11641bcf7bc21edeb2c475db11a2039
-
SSDEEP
1536:3JnafHYuEN/LO51J9O2+tB9dqS+aoSfDsHT8ODI+SuskI9qkEJjxc5Y+NfO9eAf2:3JafaNzO51JM2w9+aodHTlqmSqP90lk2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd6883a7eda2fcb2433e23f4ad8b1fd4_JaffaCakes118
Files
-
dd6883a7eda2fcb2433e23f4ad8b1fd4_JaffaCakes118.exe windows:5 windows x86 arch:x86
ca40f077ac826d21c3adcfa5a473cfe8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CheckDlgButton
IsDlgButtonChecked
SetWindowTextA
LoadIconA
LoadCursorA
EndPaint
EnableScrollBar
GetClipboardOwner
RegisterClassExA
GetWindowLongA
BeginPaint
CreateWindowExA
ShowWindow
UpdateWindow
TranslateMessage
DispatchMessageA
GetMessageA
gdi32
CreateBrushIndirect
SetBkMode
CreatePatternBrush
DeleteObject
GetStockObject
PolyBezier
ole32
CoGetStandardMarshal
StgIsStorageFile
CoUnmarshalHresult
OleSetContainedObject
CoWaitForMultipleHandles
CoGetObjectContext
oleaut32
SafeArrayAllocDescriptor
SafeArrayDestroyDescriptor
kernel32
GetStartupInfoA
HeapFree
GetACP
EnterCriticalSection
InterlockedDecrement
GetCommandLineA
GetLastError
HeapAlloc
HeapCreate
HeapDestroy
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
InitializeCriticalSection
GetFileAttributesA
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE