Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
7a21a90ab897343eec4645bb919a35b2_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
7a21a90ab897343eec4645bb919a35b2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
7a21a90ab897343eec4645bb919a35b2_JaffaCakes118
-
Size
277KB
-
MD5
7a21a90ab897343eec4645bb919a35b2
-
SHA1
e00d811373cae44a2e09c45279701a522a4ccaf3
-
SHA256
6f5a15b7a22a37f7fe3f56f3269de274b9a8a852a53b267b0e700be279e5bef5
-
SHA512
633ca43f1db4fa7df681ba7fe0f66f4c1e1b210c5e07684a8044aa9189ea537deb90069c3d703bd4306d14627b663f323a52d364a7d95bf3c18d6ff05fc24c62
-
SSDEEP
6144:C7Ha40/4vfBhdF+Go5YuKMQERxIEx+FsYdr7:6Hu4XBhWYuTAyK7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a21a90ab897343eec4645bb919a35b2_JaffaCakes118
Files
-
7a21a90ab897343eec4645bb919a35b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
4df50ee27cd09d369e2f7fb2b4eb5b21
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
newdev
UpdateDriverForPlugAndPlayDevicesW
shell32
SHGetFolderPathW
kernel32
GetEnvironmentStringsW
AddAtomA
GetEnvironmentStrings
WriteFile
FreeEnvironmentStringsA
FreeEnvironmentStringsW
EnumResourceLanguagesW
UnhandledExceptionFilter
GetCPInfo
GetPrivateProfileStructW
GetStartupInfoA
GetOEMCP
SetUnhandledExceptionFilter
iphlpapi
GetIpAddrTable
setupapi
CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
shlwapi
StrCmpNIA
StrStrA
Sections
.text Size: 136KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ