Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
6d54052247629f4623b90a75af29f12b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6d54052247629f4623b90a75af29f12b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
6d54052247629f4623b90a75af29f12b_JaffaCakes118
-
Size
103KB
-
MD5
6d54052247629f4623b90a75af29f12b
-
SHA1
5f4bad81addf1f5fc908b5f395e5e40735d9c41f
-
SHA256
e5cbcc9c338e1d6d1b7c8e01ffbe62fff44b1d95747d29f51f75236eec4f00b2
-
SHA512
9441a3630720fc947dd5c7413f31fef34ee15cfa1bee25a62d1c63f0da14882b3267fc30bd00e19d44a021748de23f75865de8e0f18514b24acc910fbfc0969c
-
SSDEEP
1536:Pwl8ICMgZPPKxWlZL65RJb573U4hZnhuG/jiEo6MvQ0w61cZQ8T:oWmg1MWlZm/Jz30G/Lo6MIxHZt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d54052247629f4623b90a75af29f12b_JaffaCakes118
Files
-
6d54052247629f4623b90a75af29f12b_JaffaCakes118.exe windows:5 windows x86 arch:x86
eda106f13d667ba286fa2fd94010c22e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfW
EnableWindow
LoadIconW
LoadStringW
GetParent
GetDlgItemTextA
LoadCursorW
RegisterClipboardFormatW
GetDlgItem
SetWindowLongW
WinHelpW
ReleaseDC
SetCursor
SendMessageW
InsertMenuItemW
SystemParametersInfoW
EndDialog
LoadImageW
SendDlgItemMessageW
SetDlgItemTextW
GetDC
SetWindowTextW
LoadBitmapW
DialogBoxParamW
SetFocus
PostMessageW
MessageBoxW
GetWindowLongW
msvcrt
_adjust_fdiv
wcslen
wcscat
__dllonexit
malloc
wcschr
_except_handler3
_initterm
_wcsupr
_onexit
wcscpy
_purecall
vswprintf
??2@YAPAXI@Z
??1type_info@@UAE@XZ
wcstoul
?terminate@@YAXXZ
free
wcscmp
wcsrchr
mbstowcs
memmove
wcsstr
__RTDynamicCast
_wcsicmp
??3@YAXPAX@Z
certcli
CACloseCertType
CAUpdateCA
CASetCertTypeFlags
CAEnumCertTypes
CAEnumCertTypesForCA
CAGetCertTypeExtensions
CAGetCertTypePropertyEx
CASetCertTypeKeySpec
CAGetCertTypeKeySpec
CAGetCertTypeProperty
CAGetCertTypeFlags
CASetCertTypeProperty
CACertTypeGetSecurity
CAAddCACertificateType
CAUpdateCertType
CAEnumNextCertType
CACreateCertType
CACertTypeSetSecurity
CACloseCA
CAFindByName
CAFreeCAProperty
CAGetCAProperty
CAFreeCertTypeExtensions
CAFindCertTypeByName
CARemoveCACertificateType
CAFreeCertTypeProperty
CASetCertTypeExtension
kernel32
FileTimeToSystemTime
GetTickCount
IsBadReadPtr
GlobalLock
InterlockedDecrement
RemoveDirectoryA
GetEnvironmentStringsW
CreateFileW
GetModuleFileNameW
GetStartupInfoA
GlobalUnlock
GetSystemTimeAsFileTime
GetLastError
GetSystemDefaultLangID
lstrlenW
SetLastError
GlobalFree
DeleteCriticalSection
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemWindowsDirectoryW
LoadLibraryW
OutputDebugStringW
FileTimeToLocalFileTime
lstrcmpiW
InitializeCriticalSection
LocalReAlloc
GetComputerNameW
GetACP
WideCharToMultiByte
InterlockedIncrement
GlobalAlloc
GetCurrentProcess
LocalFree
FormatMessageW
lstrcpyW
GetDateFormatW
CloseHandle
OutputDebugStringA
GetModuleHandleA
advapi32
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegQueryValueExW
comctl32
PropertySheetW
CreatePropertySheetPageW
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ