Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
eab140fd6c4d9e6341664d84aaeb0f3e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eab140fd6c4d9e6341664d84aaeb0f3e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eab140fd6c4d9e6341664d84aaeb0f3e_JaffaCakes118
-
Size
185KB
-
MD5
eab140fd6c4d9e6341664d84aaeb0f3e
-
SHA1
2f416a31dedcea927b47941f463bac3b7bfcd538
-
SHA256
f38179d874c98fd5cf350e3a72639256147347f4899032eeaf2ae3dadbf6f2c9
-
SHA512
cb87eee0e7f8dacc09dbdac0039917af7684fd88fe5f6bddfbb1ff8d115fc74e73cde56fac666545389cedf7c1ccd520553185f20e4be1f8890d932432ab6db5
-
SSDEEP
3072:Yi33PecYH1sPUdT7a+UFv9Go6f+Y83iqhHNp2FBCTdWp3XA9:YinPecYH1sPn+sVGoyl8/2FYWp3XG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eab140fd6c4d9e6341664d84aaeb0f3e_JaffaCakes118
Files
-
eab140fd6c4d9e6341664d84aaeb0f3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
67a8333c885350004d071fe32a40f63a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleIsCurrentClipboard
OleInitialize
CoUninitialize
CLSIDFromProgID
CoFreeUnusedLibraries
CoTaskMemFree
CoInitialize
CoRevokeClassObject
CoGetClassObject
CreateILockBytesOnHGlobal
OleUninitialize
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
CoCreateInstance
OleFlushClipboard
StgOpenStorageOnILockBytes
CoTaskMemAlloc
CLSIDFromString
gdi32
ExtTextOutW
Escape
GetBkColor
CreateBitmap
SetViewportExtEx
PtVisible
RectVisible
GetWindowExtEx
ScaleWindowExtEx
SetMapMode
DeleteDC
GetStockObject
GetViewportExtEx
SetBkColor
DeleteObject
GetObjectW
GetClipBox
TextOutW
GetDeviceCaps
SaveDC
ScaleViewportExtEx
SelectObject
GetRgnBox
GetMapMode
ExtSelectClipRgn
RestoreDC
SetTextColor
GetTextColor
SetWindowExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateRectRgnIndirect
comdlg32
GetFileTitleW
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
kernel32
FindResourceW
SetFileTime
GetCurrentDirectoryW
RemoveDirectoryW
MoveFileW
GetFileAttributesW
LoadLibraryW
CloseHandle
GetCalendarInfoA
WideCharToMultiByte
LoadResource
LocalFileTimeToFileTime
GetThreadContext
WaitForSingleObject
CreateFileW
GetModuleHandleW
SystemTimeToFileTime
GetLocaleInfoA
GetACP
RaiseException
FindFirstFileW
FreeLibrary
ConvertDefaultLocale
InterlockedExchange
EnumResourceNamesA
DeleteCriticalSection
GetVersion
DeleteFileW
ReleaseMutex
VirtualFree
lstrcmpiA
FindNextFileW
GetSystemDefaultLangID
MultiByteToWideChar
ReadFile
SizeofResource
GetThreadLocale
GetLocaleInfoW
InterlockedDecrement
GetModuleFileNameW
ExitProcess
GetCurrentProcessId
InitializeCriticalSection
FindClose
CreateMutexW
EnumResourceLanguagesW
LockResource
WriteFile
GetVersionExW
SetFilePointer
CreateDirectoryW
GetProcAddress
lstrcpyW
lstrcmpA
shlwapi
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathFileExistsW
PathAppendW
user32
IsIconic
CopyAcceleratorTableW
RemovePropW
GetWindowPlacement
MapWindowPoints
SetRect
CharNextW
SetForegroundWindow
GetClassLongW
GetForegroundWindow
LoadIconW
SetPropW
GetTopWindow
InvalidateRect
GetClassInfoExW
GetClassInfoW
RegisterWindowMessageW
MessageBeep
UpdateWindow
DefWindowProcW
GetMessagePos
IsChild
GetMessageTime
SetActiveWindow
GetPropW
RegisterClassW
OffsetRect
CallWindowProcW
InvalidateRgn
GetNextDlgGroupItem
EqualRect
IsWindow
AdjustWindowRectEx
SendDlgItemMessageA
CreateWindowExW
GetMenu
CharUpperW
WinHelpW
IntersectRect
IsRectEmpty
GetNextDlgTabItem
GetClientRect
DestroyMenu
oledlg
OleUIBusyW
advapi32
RegEnumKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExW
RegOpenKeyW
RegEnumKeyW
RegQueryValueExW
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ