c:\Hit\noun\street\Spreadsign.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
ea40c0c073d4f46184bd2b264182af37_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ea40c0c073d4f46184bd2b264182af37_JaffaCakes118
-
Size
338KB
-
MD5
ea40c0c073d4f46184bd2b264182af37
-
SHA1
385beb5ab75057ef5cb2c224c7742973e98fbd58
-
SHA256
ddab795f750ddc00d6054813bc94daf7993d6d5fccd2d57f42d2594e8aba7732
-
SHA512
d4c2dfba4e410fdefe501d3236519c3b5a249d5e9c1fea7ed2654ef862c7e1c77a14932bab8f3d5c6175f2614e7260fee7d21a436a5178036ba936de6d5102b5
-
SSDEEP
6144:6BH6A5dMkv9c5dgzyIKJ7hZWeG4HjApFiXDmT:y9dHqHNpJ7hZWfEqFsmT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea40c0c073d4f46184bd2b264182af37_JaffaCakes118
Files
-
ea40c0c073d4f46184bd2b264182af37_JaffaCakes118.exe windows:6 windows x86 arch:x86
08a4f6b43411457c1d9a62ec789dcf99
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetEnvironmentVariableA
GetSystemDirectoryA
GetCurrentDirectoryA
CreateFileA
MoveFileA
GetVolumeInformationA
QueryPerformanceCounter
GetVersionExA
GetDateFormatA
GetModuleHandleA
SetStdHandle
CloseHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
OutputDebugStringW
HeapReAlloc
GetCPInfo
GetSystemTime
SizeofResource
LoadResource
Sleep
CreateThread
OpenProcess
GetProcessHeap
HeapAlloc
VirtualProtectEx
LocalFree
WriteConsoleW
LocalAlloc
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
LCMapStringW
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
IsProcessorFeaturePresent
GetLastError
HeapFree
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetCurrentThreadId
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CreateFileW
user32
GetKeyNameTextA
GetWindowTextLengthA
ClientToScreen
ScreenToClient
FrameRect
SystemParametersInfoA
SetDlgItemTextA
DrawEdge
RegisterClassExA
IsDlgButtonChecked
comctl32
ImageList_SetIconSize
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_AddMasked
ImageList_Destroy
ImageList_Remove
comdlg32
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
ReplaceTextA
ole32
OleSetContainedObject
OleInitialize
OleUninitialize
winmm
timeBeginPeriod
timeGetTime
uxtheme
DrawThemeText
CloseThemeData
OpenThemeData
xolehlp
ord7
Sections
.text Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ