Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
0f1aa5f6fd74c362e0921ec29398a43e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f1aa5f6fd74c362e0921ec29398a43e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f1aa5f6fd74c362e0921ec29398a43e_JaffaCakes118
-
Size
314KB
-
MD5
0f1aa5f6fd74c362e0921ec29398a43e
-
SHA1
627cff04e9b812394c3569ee4e9ff98e5f5025bc
-
SHA256
b44ac5d876a27677c138df4c57500613590573e36ea89c7074d94869571ec9c6
-
SHA512
b36e077cdb8b0e24ae4e62b3be075fc180756ada06062dac2567a5794c27e55a8b00daf524a3994512d2229dd0d8110cb5a0ad0151bb2b873e837091cc8b16eb
-
SSDEEP
6144:sGUfAWA+GdPAbt51c+2INc0oQjrzhe4NEZ18SGDZR/nBJJHzg0Vrmx:AfA+GdPeL1BlcbQj39GZiSGDZR/LJ00V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f1aa5f6fd74c362e0921ec29398a43e_JaffaCakes118
Files
-
0f1aa5f6fd74c362e0921ec29398a43e_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ddd3e4d5a0aeb3c9d876833f8c1ef42
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
TlsSetValue
GetStringTypeW
GetStringTypeA
OutputDebugStringW
GetLocaleInfoA
EnumSystemLanguageGroupsW
DebugBreak
WriteConsoleW
HeapReAlloc
IsValidCodePage
GetTimeZoneInformation
LCMapStringA
CompareFileTime
LCMapStringW
GetCPInfo
oleacc
CreateStdAccessibleObject
CreateStdAccessibleProxyA
shlwapi
PathAddBackslashW
advapi32
DuplicateTokenEx
GetSecurityDescriptorLength
AddAce
GetUserNameA
InitializeSecurityDescriptor
LookupAccountSidA
PrivilegeCheck
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
QueryServiceStatus
RegOpenKeyExW
shell32
SHChangeNotify
SHGetMalloc
SHGetPathFromIDListW
winmm
mciSendCommandA
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 217KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ