Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
hr_setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
hr_setup.exe
Resource
win10v2004-20240802-en
General
-
Target
eac122b91c6c9f5728cbe249a99ec18c_JaffaCakes118
-
Size
596KB
-
MD5
eac122b91c6c9f5728cbe249a99ec18c
-
SHA1
a907c40e259a79a6bc644344ea0ade708dba4c9c
-
SHA256
76ea9196c28202072fd99d7db5c761158305afa542f70c904ae0d490385f153b
-
SHA512
84dea9bee746e9093f99db1f4300ae503991fc744fb13f0b1b918d0c8b90ba1d8580277a6b89ad6f9588b2acf07d831b46e2e650845f8b0caca74d81a59e4296
-
SSDEEP
12288:XKiZDc6m1/mWFSCSZESSPB/dQS+r1fveTkXP96uCnJTzwyAfYmEa+Kjp:/QjuWFSNZESupiF1XlenJHjba1jp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/hr_setup.exe
Files
-
eac122b91c6c9f5728cbe249a99ec18c_JaffaCakes118.zip
-
License.txt
-
Readme.txt
-
file_id.diz
-
hr_setup.exe.exe windows:4 windows x86 arch:x86
a5d2295da1327dd1651fca87eab436a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
GetVersionExA
GetDiskFreeSpaceA
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
WinExec
GetDriveTypeA
GlobalFree
GlobalAlloc
GlobalLock
CloseHandle
SetFilePointer
WriteFile
ReadFile
CreateFileA
MoveFileExA
GetShortPathNameA
LocalAlloc
GetTempPathA
LocalFree
GetCurrentProcess
lstrcatA
SetFileTime
LoadLibraryA
GetProcAddress
FreeLibrary
WritePrivateProfileStringA
GetPrivateProfileStringA
GetWindowsDirectoryA
GetSystemDirectoryA
GetSystemTime
GetTickCount
GetExitCodeProcess
CreateProcessA
GetFullPathNameA
GlobalHandle
GlobalUnlock
FindFirstFileA
UnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
WideCharToMultiByte
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
RaiseException
CreateDirectoryA
HeapCompact
TerminateProcess
GetLastError
ExitProcess
MoveFileA
DeleteFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
GetFileAttributesA
SetFileAttributesA
HeapAlloc
HeapFree
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetStringTypeA
GetStringTypeW
IsBadCodePtr
user32
FillRect
SetWindowPos
ScreenToClient
CheckRadioButton
GetWindowRect
IsDialogMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
SetFocus
EnableWindow
ShowWindow
GetDlgItem
CreateDialogIndirectParamA
IsDlgButtonChecked
KillTimer
SetTimer
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
GetDlgItemTextA
SendDlgItemMessageA
SetDlgItemTextA
PeekMessageA
SendMessageA
EndPaint
BeginPaint
IsWindowVisible
CheckDlgButton
ExitWindowsEx
PostMessageA
DefWindowProcA
RegisterWindowMessageA
OemToCharA
GetParent
GetDC
ReleaseDC
GetWindow
MessageBoxA
GetSysColor
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
FindWindowA
GetLastActivePopup
BringWindowToTop
GetSystemMetrics
AdjustWindowRectEx
UpdateWindow
IsIconic
RedrawWindow
PostQuitMessage
SetWindowTextA
wsprintfA
GetClientRect
SetWindowLongA
gdi32
AddFontResourceA
CreateSolidBrush
DeleteObject
CreateFontIndirectA
GetObjectA
ExtTextOutA
SetBkColor
CreatePalette
GetSystemPaletteEntries
GetDeviceCaps
StretchDIBits
RealizePalette
SelectPalette
IntersectClipRect
TextOutA
SetTextColor
SetBkMode
CreateDIBPatternBrush
SelectObject
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueA
shell32
SHGetPathFromIDListA
DragQueryFileA
SHGetSpecialFolderLocation
DragAcceptFiles
ShellExecuteA
DragFinish
ole32
CoCreateInstance
OleInitialize
OleUninitialize
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
VerFindFileA
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ