Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
eacebed55ebdd6edffa81f8b82295fbc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eacebed55ebdd6edffa81f8b82295fbc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eacebed55ebdd6edffa81f8b82295fbc_JaffaCakes118
-
Size
107KB
-
MD5
eacebed55ebdd6edffa81f8b82295fbc
-
SHA1
4a49de09af89939a2cca24b882da2cec805dd642
-
SHA256
38b74663abec1e88ce76d9a68b34c7bf80479bdb11a8dd29b2e1574e2aa19251
-
SHA512
964f9ea42a6f04577b2c07b0e3673930ec15dc3ddd79a648192748dac3fc23f412b6587d7341244eab9319442c429846dbe67db340e1195f81dd901842678f10
-
SSDEEP
1536:sHsaGa2gvKFciDLnqfFDeFMP7KjQrJUxwghAm0lAYF09C+3ZHqd7BT6E40lpFW5:sMaGpMPiqFDS/QiwztHL+pK1pFW5A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eacebed55ebdd6edffa81f8b82295fbc_JaffaCakes118
Files
-
eacebed55ebdd6edffa81f8b82295fbc_JaffaCakes118.exe windows:4 windows x86 arch:x86
28b01771340dcb9455988a833dbd901e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetMapMode
RestoreDC
GetPixel
GetClipBox
CreatePalette
LineTo
SetStretchBltMode
DeleteDC
SetTextAlign
GetStockObject
RectVisible
GetTextMetricsA
SelectPalette
GetObjectA
CreateSolidBrush
user32
GetDesktopWindow
TranslateMessage
GetDC
CharNextA
GetParent
GetSystemMetrics
kernel32
DeleteFileA
CopyFileA
lstrcmpiW
lstrcmpA
RemoveDirectoryA
QueryPerformanceCounter
GetSystemTime
lstrlenW
GetModuleHandleA
RemoveDirectoryW
FindClose
lstrlenA
lstrcmpiA
GlobalFindAtomA
GetWindowsDirectoryA
GetCommandLineA
VirtualAlloc
VirtualFree
glu32
gluNurbsCallback
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dvirjtl Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE