Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
ead075e50d2ea8f2b886258395f08711_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ead075e50d2ea8f2b886258395f08711_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ead075e50d2ea8f2b886258395f08711_JaffaCakes118
-
Size
23KB
-
MD5
ead075e50d2ea8f2b886258395f08711
-
SHA1
667334ea43360f7f624e35c41456777f17344b38
-
SHA256
2ba91c219da74258a29050f127a179f8c56616157df4a11e1d999272c383cdd6
-
SHA512
0c864caff237c29e700b83412e33c78565bbe009b807d543e9e7336b7486197487125a653dcb67f2020697d6f2a305dce548061bdc4ac79553f596c5ea67e999
-
SSDEEP
384:QCtHZdcE3x0xNgiqe+synvK0fSsZLHBxPfKDyyCUVJZ69v:9tHZdFWNgiusI3fSeHBxP6CUXZ4v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ead075e50d2ea8f2b886258395f08711_JaffaCakes118
Files
-
ead075e50d2ea8f2b886258395f08711_JaffaCakes118.exe windows:4 windows x86 arch:x86
288ade89447ba4759a6a1afe847c600d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
ExitProcess
VirtualAlloc
GetFileSize
CreateFileA
ReadFile
GetCommandLineA
SetCurrentDirectoryA
ResumeThread
SetThreadPriority
CreateProcessA
CloseHandle
WriteFile
GetCurrentDirectoryA
OpenMutexA
FindClose
FindFirstFileA
lstrcpyA
lstrcpynA
lstrcatA
GetShortPathNameA
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
Sleep
DeleteFileA
SetFileAttributesA
FindNextFileA
RemoveDirectoryA
CopyFileA
SetFilePointer
GetWindowsDirectoryA
GetTempPathA
CompareStringA
InterlockedIncrement
GetModuleHandleA
MultiByteToWideChar
SetErrorMode
LoadLibraryExA
GetLastError
GetProcAddress
lstrlenA
FreeLibrary
LoadLibraryA
WaitForSingleObject
GetModuleFileNameA
user32
GetWindowLongA
LoadIconA
SetClassLongA
SendMessageA
EndDialog
DialogBoxParamA
ShowWindow
SetWindowPos
PostMessageA
SetDlgItemTextA
FindWindowA
EnumWindows
GetWindowTextA
wvsprintfA
MessageBoxA
wsprintfA
SetWindowTextA
GetWindowRect
GetDlgItem
EnableWindow
SendDlgItemMessageA
gdi32
RemoveFontResourceA
advapi32
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
shell32
SHChangeNotify
ole32
OleInitialize
OleUninitialize
oleaut32
LoadTypeLi
UnRegisterTypeLi
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Shared Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
XOR Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE