Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
0c34cca4d5a99b903bce88ec2fa5f676_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0c34cca4d5a99b903bce88ec2fa5f676_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c34cca4d5a99b903bce88ec2fa5f676_JaffaCakes118
-
Size
109KB
-
MD5
0c34cca4d5a99b903bce88ec2fa5f676
-
SHA1
955d6d3df4c042fbc930da1f216df1c4f885b22b
-
SHA256
d638284493dba5b3159aaddb4149858077a84123594178acf26108b88d018fa4
-
SHA512
534dfa7af4b405a71d71ab1b417528f0114ae33bd987772ed4bc1618f36ab0b04c0482180249ec3df99448273228577a063e8b49463658b0335ae6dd864a4587
-
SSDEEP
3072:6EJ45tmfQJ4GerCLsyjYR7NTiNodTmi9ureB6yclfn1:mmfCPY3iNodF9ureVw9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c34cca4d5a99b903bce88ec2fa5f676_JaffaCakes118
Files
-
0c34cca4d5a99b903bce88ec2fa5f676_JaffaCakes118.exe windows:5 windows x86 arch:x86
db01efa0c5003de80728da29c0be412b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
WaitForMultipleObjects
GetFileTime
ExitThread
HeapCreate
lstrlenA
GetDriveTypeA
ReadFile
GetCommandLineW
HeapFree
SetLastError
CloseHandle
GetEnvironmentVariableW
FindClose
SetLastError
IsBadReadPtr
SetFileAttributesW
GlobalLock
GetFileType
GetModuleHandleA
MapViewOfFile
GetFileAttributesA
GlobalSize
EnterCriticalSection
GetCurrentDirectoryW
uxtheme
DrawThemeBackground
CloseThemeData
GetThemeEnumValue
DrawThemeEdge
SetWindowTheme
GetThemeTextMetrics
GetWindowTheme
GetThemeColor
IsThemeActive
GetThemeTextExtent
OpenThemeData
CloseThemeData
GetThemeBool
dispex
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE