Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
7bd4570f188f8a8c05a475a5fa21b55c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7bd4570f188f8a8c05a475a5fa21b55c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
7bd4570f188f8a8c05a475a5fa21b55c_JaffaCakes118
-
Size
101KB
-
MD5
7bd4570f188f8a8c05a475a5fa21b55c
-
SHA1
5feb9dd9ab1cb2a53a3e3a41bb028dc9e1035ed1
-
SHA256
ec7037f6831e204df1f89a3d6c4fc6a5b901669c529c553d188610f2e20bc01f
-
SHA512
6ee2be49a41c6dbe54159508a931a20ee4bd53d99bdad04ccead6c86626b000fda6e15cf460a0ff3f6ce88bdaa0c92601dbaee8f3daf663a8f64c81fd1d4dcf2
-
SSDEEP
1536:m9TyV49eaMSjLBkjl9zyG9dYJqggo1AEhqXHccEaA7wR5onHGO6Wa4JcQy:m9+amSOvtQqQPBaA+5onHGOg4qQy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bd4570f188f8a8c05a475a5fa21b55c_JaffaCakes118
Files
-
7bd4570f188f8a8c05a475a5fa21b55c_JaffaCakes118.exe windows:5 windows x86 arch:x86
884da5ec0cfb45c7506176d5694bfe7b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__RTDynamicCast
??2@YAPAXI@Z
_onexit
vswprintf
free
memmove
wcstoul
??1type_info@@UAE@XZ
wcscmp
wcscpy
wcschr
?terminate@@YAXXZ
wcslen
_except_handler3
wcscat
__dllonexit
mbstowcs
_wcsupr
_wcsicmp
wcsrchr
wcsstr
_initterm
_purecall
malloc
_adjust_fdiv
??3@YAXPAX@Z
kernel32
DeleteCriticalSection
SetUnhandledExceptionFilter
GetEnvironmentStringsW
QueryPerformanceCounter
GlobalUnlock
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
FileTimeToSystemTime
GetStartupInfoA
GetDateFormatW
GetSystemDefaultLangID
GetSystemWindowsDirectoryW
SetLastError
CreateFileW
GetLastError
LoadLibraryW
GlobalAlloc
LocalReAlloc
OutputDebugStringA
GetTickCount
GlobalLock
LocalFree
GetComputerNameW
lstrlenW
WideCharToMultiByte
InitializeCriticalSection
IsBadReadPtr
OutputDebugStringW
GetACP
lstrcmpiW
GetModuleHandleA
FileTimeToLocalFileTime
CloseHandle
RemoveDirectoryA
lstrcpyW
GetModuleFileNameW
GlobalFree
GetSystemTimeAsFileTime
FormatMessageW
user32
WinHelpW
LoadStringW
RegisterClipboardFormatW
SetWindowLongW
EnableWindow
ReleaseDC
GetDlgItemTextA
InsertMenuItemW
LoadIconW
GetWindowLongW
SetDlgItemTextW
DialogBoxParamW
GetParent
GetDC
SetCursor
wsprintfW
LoadCursorW
GetDlgItem
SystemParametersInfoW
SetFocus
SendDlgItemMessageW
EndDialog
MessageBoxW
LoadBitmapW
SendMessageW
SetWindowTextW
PostMessageW
LoadImageW
certcli
CAEnumCertTypesForCA
CAGetCAProperty
CAGetCertTypeExtensions
CACertTypeGetSecurity
CAEnumNextCertType
CAFreeCAProperty
CAFreeCertTypeExtensions
CASetCertTypeExtension
CAUpdateCertType
CACloseCertType
CAFreeCertTypeProperty
CASetCertTypeKeySpec
CAFindByName
CACertTypeSetSecurity
CAGetCertTypePropertyEx
CAGetCertTypeProperty
CASetCertTypeFlags
CACreateCertType
CARemoveCACertificateType
CAGetCertTypeKeySpec
CAEnumCertTypes
CAUpdateCA
CASetCertTypeProperty
CAFindCertTypeByName
CAAddCACertificateType
CACloseCA
CAGetCertTypeFlags
advapi32
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
RegCreateKeyExW
RegOpenKeyExW
comctl32
CreatePropertySheetPageW
PropertySheetW
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ