Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
135d5d32df5ae223d43521244de955ea_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
135d5d32df5ae223d43521244de955ea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
135d5d32df5ae223d43521244de955ea_JaffaCakes118
-
Size
140KB
-
MD5
135d5d32df5ae223d43521244de955ea
-
SHA1
7f4399dd257a4921449767b932e47b1dd922b07a
-
SHA256
b1da1488ff59f6ac6b37e73d6e90c160407b04da9b1c6ceec89fdba552f97b46
-
SHA512
ff8138bc100f93efb9ca3c48cf428de0610f04158358b26613cce01f59d3a8ba0693854eaa92b842d6b9ce0511b760531af60844ca46b528e988f430937d901d
-
SSDEEP
1536:u7Nx7zA4eBF2GQRVVsRQ5gRkmqeO0D/btGSRSh5+OsSCW:kNVzLeBF2vVqwmRDtlEh5+OZV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 135d5d32df5ae223d43521244de955ea_JaffaCakes118
Files
-
135d5d32df5ae223d43521244de955ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
56bed5644a39fca008a447496003937e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowDC
TranslateMessage
GetMessageA
GetDC
LoadCursorA
DrawTextA
DispatchMessageA
DefWindowProcA
CreateWindowExA
LoadIconA
PostMessageA
PostQuitMessage
RegisterClassExA
UpdateWindow
EndPaint
GetDlgCtrlID
GetParent
GetWindowLongA
GetWindowRect
LoadBitmapA
ReleaseCapture
SetCapture
SetWindowLongA
SetWindowPos
ShowWindow
SetWindowTextA
SetWindowRgn
SetRect
GetSystemMetrics
BeginPaint
SendMessageA
kernel32
LocalFree
LocalAlloc
MulDiv
SetLastError
CloseHandle
lstrcpyA
CreateThread
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetTickCount
LoadResource
LockResource
SetThreadPriority
SizeofResource
Sleep
lstrcatA
gdi32
CreateFontA
CreateCompatibleBitmap
SetTextColor
SetTextAlign
SetBkMode
SetBkColor
SelectObject
DeleteObject
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateDIBSection
CreateCompatibleDC
CombineRgn
BitBlt
GetDeviceCaps
ole32
CoInitialize
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
oleaut32
OleLoadPicture
winmm
waveOutWrite
waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutReset
waveOutUnprepareHeader
waveOutGetPosition
Sections
pec1 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE