Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
0f29e077fa0884f247d0a8052b2c5c93_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0f29e077fa0884f247d0a8052b2c5c93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f29e077fa0884f247d0a8052b2c5c93_JaffaCakes118
-
Size
285KB
-
MD5
0f29e077fa0884f247d0a8052b2c5c93
-
SHA1
cf91a1e86e9efe92e0127c1db549b385b8bb0704
-
SHA256
75b9246878a960227a4eed745a2c356d11687572d0dd2b89d5afd60faf6b39a1
-
SHA512
9d5ca93aae220c4ecb75b988dee5bc8f75c92fc6fc969718dd38f453f08353b5c144d8f011b5b40155b4f52460dc066d4aec382845ec2198ed64c27678a5d32e
-
SSDEEP
6144:O9j178jCWXkANmZGceQhAmrf+jTCWdCJqv8+nY:a6jCekoD5QmIaTCWYJqv8+nY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f29e077fa0884f247d0a8052b2c5c93_JaffaCakes118
Files
-
0f29e077fa0884f247d0a8052b2c5c93_JaffaCakes118.exe windows:4 windows x86 arch:x86
c1abc6ce262cc14c5978844f354ce28f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
RtlUnwind
GlobalGetAtomNameA
IsValidCodePage
HeapSize
HeapReAlloc
TlsSetValue
SetFilePointer
MultiByteToWideChar
GetDateFormatA
EnumResourceNamesW
GetConsoleOutputCP
SetStdHandle
VirtualAlloc
TlsAlloc
GetTimeFormatA
GetOEMCP
WideCharToMultiByte
GetCPInfo
GetACP
WriteConsoleA
TlsGetValue
RaiseException
shell32
SHGetSpecialFolderLocation
ShellExecuteExA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHAppBarMessage
DragAcceptFiles
Shell_NotifyIconA
user32
MessageBoxA
PeekMessageA
DispatchMessageW
CharNextA
GetDesktopWindow
LoadStringA
DispatchMessageA
wsprintfA
rpcrt4
RpcStringFreeA
Sections
.text Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ