Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
8203e48a8f4ef3222962f3fd00a8a731_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
8203e48a8f4ef3222962f3fd00a8a731_JaffaCakes118
-
Size
1.2MB
-
MD5
8203e48a8f4ef3222962f3fd00a8a731
-
SHA1
58e9fe4e4be60dee8fba0c1f7a8e358d8b2ad7c7
-
SHA256
5a249d68140e642d1034d038ade0fdee40ef788fbe9e93492f72038ec2ce1895
-
SHA512
b05b07b4029426d6548d64557b908454bf78fba04f1d9a1a9bb1e9fac753295bb2dfd21f752085ee8c87f10eb469322de0484ec120159a6a888ee9ebf65bc2ce
-
SSDEEP
24576:PZ+7EWOzlwruFR1YxgmEqn6TyXV+3rD11R8sW:Q7F6kxBBn6+wrDf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8203e48a8f4ef3222962f3fd00a8a731_JaffaCakes118
Files
-
8203e48a8f4ef3222962f3fd00a8a731_JaffaCakes118.exe windows:4 windows x86 arch:x86
d18cdf3eedaa3f0ea3ffecc521a138f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CreateSemaphoreA
ExitProcess
FindAtomA
GetAtomNameA
GetLastError
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
msvcrt
_fdopen
_lseek
_read
_strdup
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_ctype
_errno
_filbuf
_flsbuf
_iob
_isctype
_onexit
_pctype
_setmode
_strnicmp
_vsnprintf
abort
atexit
fclose
fflush
fopen
fread
free
fseek
ftell
fwrite
localeconv
malloc
memchr
memcpy
memmove
memset
setlocale
setvbuf
signal
strcat
strcmp
strcoll
strcpy
strftime
strlen
strtod
strxfrm
ungetc
shell32
SHGetFolderPathA
ShellExecuteExA
Sections
.text Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 940KB - Virtual size: 939KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ctors Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 18KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE