Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
4eb96c4de5d7f7f9c600c565eb169d4a_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4eb96c4de5d7f7f9c600c565eb169d4a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4eb96c4de5d7f7f9c600c565eb169d4a_JaffaCakes118
-
Size
241KB
-
MD5
4eb96c4de5d7f7f9c600c565eb169d4a
-
SHA1
3851e8d3a83e3ae0e25003b91fc91b9d908cc512
-
SHA256
b8bfe6d99aefb50a8918788e51a1bc19d06479ed674df5db07e8cf318a9c09ea
-
SHA512
75b9b6e2c46c4ec3c547d60fc9d85e0749827eafe112f1c0f44144e7f8a851f8fb33fb53fd7438427aa10edb9caf4c2ed5b6fffa57758637dc6597854a203ab1
-
SSDEEP
6144:kL9h7YTJUQR+xHFGO1/Fc/+1+RF5boHp9U5+OYCy4H:i/Y6QR+7GS/Mq+RF9oHHU5ACy4H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4eb96c4de5d7f7f9c600c565eb169d4a_JaffaCakes118
Files
-
4eb96c4de5d7f7f9c600c565eb169d4a_JaffaCakes118.exe windows:5 windows x86 arch:x86
a449cbcc66e31717c40783fe089e75c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
VkKeyScanExA
ChildWindowFromPointEx
ScrollDC
IsWindowVisible
PostQuitMessage
MessageBeep
LoadCursorA
GetDoubleClickTime
CharToOemBuffW
GetScrollRange
GetMessagePos
CreateDialogParamW
LoadBitmapW
CharNextW
ShowWindow
ModifyMenuA
UpdateWindow
GetSystemMenu
VkKeyScanW
shell32
SHGetPathFromIDListA
ole32
OleTranslateAccelerator
OleInitialize
OleCreateMenuDescriptor
advapi32
RegSetValueExA
RegCreateKeyA
gdi32
GetCharWidthA
CreateDCA
netapi32
NetEnumerateComputerNames
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryA
GetLocaleInfoA
VirtualFree
RtlUnwind
IsDebuggerPresent
EncodePointer
GetThreadPriority
OpenProcess
GetCurrentProcessId
FindResourceW
FormatMessageW
GetWindowsDirectoryW
PeekNamedPipe
GetCurrentDirectoryA
VirtualAlloc
HeapDestroy
EnumResourceNamesW
GetShortPathNameW
LocalReAlloc
OpenFile
QueryPerformanceFrequency
WaitForMultipleObjects
GetWindowsDirectoryA
LoadLibraryW
ResetEvent
HeapAlloc
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ