Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
fb8731dd0ae3fcb5426caa617d6b03c5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb8731dd0ae3fcb5426caa617d6b03c5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb8731dd0ae3fcb5426caa617d6b03c5_JaffaCakes118
-
Size
287KB
-
MD5
fb8731dd0ae3fcb5426caa617d6b03c5
-
SHA1
25d0496b019bc94c466c25a44e88878341338f20
-
SHA256
f3991737ad02cf3beaae6ec316f3a66b57abe8de5b6f01aa544621710e416437
-
SHA512
0531c241b0b1cea1132286d2b204f464fa1b1ed5c1c73ca82450de57cf0f8d37708d0dc2c2f84f0df4ddc36d44c041b42ebf54a787eb1bba5edc46c05ad042c7
-
SSDEEP
6144:hLOasUboFqQ6BGQSu3czOnmfu1D7HRRknUfw/Iytb:hloFqQ68a8mF1D7HRRkUI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb8731dd0ae3fcb5426caa617d6b03c5_JaffaCakes118
Files
-
fb8731dd0ae3fcb5426caa617d6b03c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
7e7395762bb88fbfab9f227a3078fd2d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
StrRetToBSTR
PathFindExtensionW
PathCreateFromUrlW
PathRemoveFileSpecW
PathIsRelativeW
PathAppendW
UrlCreateFromPathW
StrCmpIW
UrlUnescapeW
PathCombineW
oleacc
CreateStdAccessibleObject
kernel32
LocalAlloc
GlobalFindAtomA
SetUnhandledExceptionFilter
GetTickCount
IsDebuggerPresent
QueryPerformanceCounter
InterlockedCompareExchange
GetCurrentProcess
InterlockedExchange
GetStartupInfoA
EnumResourceLanguagesW
VirtualProtect
GetModuleHandleW
GetLocaleInfoW
GetCurrentProcessId
FoldStringW
GetPrivateProfileSectionA
GetCurrentThreadId
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetProcessHeap
TerminateProcess
DeleteFileW
Sections
.text Size: 149KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ