Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
11a13418d08527a1df11a91aa6560863_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11a13418d08527a1df11a91aa6560863_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
11a13418d08527a1df11a91aa6560863_JaffaCakes118
-
Size
282KB
-
MD5
11a13418d08527a1df11a91aa6560863
-
SHA1
ff4fb55fe1aa7ffbb79775b16ade23afd395d39b
-
SHA256
737ba07e36e4c3eeb668b5425b332178c504194abe72000e2605a53555087b90
-
SHA512
74af708b092a83bdeb8d7c0b0e72ecb7e2508241360d8d8861b333180c9823ae3cd19feb9436d8fc8239791d63970622daa8fde1276b39c7cd33e9aafda50536
-
SSDEEP
6144:Izf/4vdu9hHaZBynO1qQZq2kwJD7DOZa6emP/CvL:Izf/X9hHXQY2kqD7DOw6eeaT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11a13418d08527a1df11a91aa6560863_JaffaCakes118
Files
-
11a13418d08527a1df11a91aa6560863_JaffaCakes118.exe windows:4 windows x86 arch:x86
ddba739450f63ae3d114d8e82f8e11c6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsSetValue
TlsAlloc
GlobalGetAtomNameA
GetOEMCP
VirtualAlloc
GetDateFormatA
IsValidCodePage
GetCPInfo
SetFilePointer
GetTimeFormatA
GetACP
TlsGetValue
EnumResourceNamesA
MultiByteToWideChar
RtlUnwind
HeapReAlloc
CreateHardLinkA
WriteConsoleA
GetLocaleInfoA
SetStdHandle
HeapSize
GetConsoleOutputCP
RaiseException
rpcrt4
RpcStringFreeA
shell32
SHGetFolderLocation
SHGetSpecialFolderLocation
ShellExecuteA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetFileInfoA
SHGetMalloc
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteExA
DragAcceptFiles
Shell_NotifyIconA
user32
LoadStringA
GetDesktopWindow
DispatchMessageW
MessageBoxA
PeekMessageA
CharNextA
DispatchMessageA
wsprintfA
Sections
.text Size: 129KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ