Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
63ebf64aea416da73b78c128bd0de978_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
63ebf64aea416da73b78c128bd0de978_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
63ebf64aea416da73b78c128bd0de978_JaffaCakes118
-
Size
65KB
-
MD5
63ebf64aea416da73b78c128bd0de978
-
SHA1
25cfb9cbbad8a3415b800973c430f61e45f0e6c0
-
SHA256
0178e0072fa6bd34a21af2edf4182deb0e3df20b11b9a31794da6cf98d5a5de0
-
SHA512
e07b0beac0743da6e9d8b28acb860d7795a4ac2b56108d41ac5f7c40097829472f4fd6503a313ff94e95216bca3b4affa4fe2d21e2a98d61c29c65a8ab336117
-
SSDEEP
1536:elB1zq+5hRpfvE7IxEos7PcF+KPmfRuUf/cDJUw9n6ns+jdzAqjq4yvGp:ezxEVPA+qmfR5CJUxs+SQeGp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63ebf64aea416da73b78c128bd0de978_JaffaCakes118
Files
-
63ebf64aea416da73b78c128bd0de978_JaffaCakes118.exe windows:4 windows x86 arch:x86
cdb30c5b5371b95eafab652c486e02fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fseek
ftell
fread
fabs
ceil
malloc
floor
free
fclose
_CIacos
_CIcosh
strlen
strcpy
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetProcAddress
FreeLibrary
LoadLibraryA
HeapAlloc
HeapFree
CloseHandle
InitializeCriticalSection
GetExitCodeProcess
GetProfileStringA
GetVersionExA
TlsAlloc
HeapReAlloc
user32.dll..
CallWindowProcA
ShowCursor
DestroyWindow
InvalidateRect
ShowWindow
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
SetMenu
DestroyMenu
FillRect
DestroyIcon
gdi32
GetStockObject
CreateDCA
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
GetObjectType
CreateDIBSection
DeleteObject
SelectObject
BitBlt
CreateBitmap
SetPixel
winmm
timeEndPeriod
Sections
.code Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 727B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ