Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
ee679e9bd72d8f41984738e6304d704b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ee679e9bd72d8f41984738e6304d704b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ee679e9bd72d8f41984738e6304d704b_JaffaCakes118
-
Size
244KB
-
MD5
ee679e9bd72d8f41984738e6304d704b
-
SHA1
9671b25bc313f326da3b5bc8f9f2b479b618c634
-
SHA256
d36dff742f31494cfa367ca5386bc522bed1b48931dfead32b6bad895e366c0c
-
SHA512
f370548f6ba05d45b81630be1f8c0524939a4fdf87b1804b8f0e667908b2bc54f3a5e86045fa139655d132b3dde4914bf0bc087ea484c25c97ccdccda2be9a14
-
SSDEEP
6144:qM7BjzGVYibYEI73IL28HugLFte+VtY0:Z7RaYUYEILj8lXeW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee679e9bd72d8f41984738e6304d704b_JaffaCakes118
Files
-
ee679e9bd72d8f41984738e6304d704b_JaffaCakes118.exe windows:4 windows x86 arch:x86
820d96ceb9b26e0fb7353a9fb542dd1e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLCID
FindClose
FindFirstFileW
CreateConsoleScreenBuffer
GetVolumeInformationW
GetFullPathNameW
CreateFileW
SetErrorMode
GetVersionExW
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
HeapReAlloc
GetTimeZoneInformation
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
user32
SendDlgItemMessageW
IsDialogMessageW
SetWindowTextW
MoveWindow
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
CallWindowProcW
DefWindowProcW
PtInRect
DeferWindowPos
ScreenToClient
RegisterClassW
GetClassInfoExW
CreateWindowExW
MessageBoxW
GetClientRect
SetForegroundWindow
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageW
GetForegroundWindow
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
shlwapi
PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathCombineW
shell32
SHGetFolderPathW
DragQueryFileW
DragFinish
CommandLineToArgvW
SHFileOperationW
oleaut32
DispGetIDsOfNames
CreateErrorInfo
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString
ole32
CoRevokeClassObject
OleIsCurrentClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
OleFlushClipboard
CoRegisterMessageFilter
comdlg32
GetFileTitleW
oledlg
OleUIBusyW
Sections
.text Size: 142KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE