Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
95ffb1f59d4a69c02701b817760f7ba6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
95ffb1f59d4a69c02701b817760f7ba6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
95ffb1f59d4a69c02701b817760f7ba6_JaffaCakes118
-
Size
101KB
-
MD5
95ffb1f59d4a69c02701b817760f7ba6
-
SHA1
fa3b53a8a8671f816fcffffaff9b5045fd1e807d
-
SHA256
77723a3e5055475b1434e8da4f7190f67da3d11d46b1dbe8f83c02eda841af5a
-
SHA512
8f03de12e9628d5fdd95b911ca33f5d6620fac900aea48ec3dfe549b7aa1fea6b6978adb7e4ceed57e5d6c2c8920c5d0fa775173c9ab2aa29bc132fb37c96722
-
SSDEEP
1536:eC7PhLe55pfntaBv5+5y+dkT2asK32f3i1p7kFBR9:rPhLe/pfta3+5/kaN5vi1CFBR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95ffb1f59d4a69c02701b817760f7ba6_JaffaCakes118
Files
-
95ffb1f59d4a69c02701b817760f7ba6_JaffaCakes118.exe windows:5 windows x86 arch:x86
4fc7971786d4207689834e683a18fbc5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
wcstoul
vswprintf
__dllonexit
_onexit
wcschr
wcscmp
memmove
?terminate@@YAXXZ
_wcsupr
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
wcscpy
wcsrchr
__RTDynamicCast
??2@YAPAXI@Z
_wcsicmp
wcscat
malloc
??3@YAXPAX@Z
mbstowcs
_except_handler3
free
wcslen
wcsstr
advapi32
RegQueryValueExW
RegEnumKeyExW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
kernel32
GlobalAlloc
GetModuleHandleA
GetSystemWindowsDirectoryW
CloseHandle
IsBadReadPtr
InterlockedDecrement
FileTimeToLocalFileTime
LocalReAlloc
SetLastError
lstrcpyW
LocalFree
InitializeCriticalSection
FileTimeToSystemTime
GetModuleFileNameW
InterlockedIncrement
SetUnhandledExceptionFilter
LoadLibraryW
GetSystemDefaultLangID
OutputDebugStringA
lstrcmpiW
GetProcAddress
GetDateFormatW
CreateFileW
GetLastError
GetStartupInfoA
DeleteCriticalSection
GetComputerNameW
GetCurrentThread
GetEnvironmentStringsW
GlobalUnlock
GetCurrentProcess
OutputDebugStringW
GlobalLock
GlobalFree
GetCPInfo
QueryPerformanceCounter
GetSystemTimeAsFileTime
FormatMessageW
GetTickCount
WideCharToMultiByte
lstrlenW
user32
RegisterClipboardFormatW
ReleaseDC
LoadImageW
GetWindowLongW
GetParent
EndDialog
SetWindowLongW
GetDlgItemTextA
InsertMenuItemW
MessageBoxW
EnableWindow
wsprintfW
LoadIconW
SystemParametersInfoW
WinHelpW
LoadCursorW
SendMessageW
GetDlgItem
SetDlgItemTextW
LoadBitmapW
PostMessageW
DialogBoxParamW
SetFocus
GetDC
LoadStringW
SetWindowTextW
SendDlgItemMessageW
SetCursor
certcli
CAGetCertTypePropertyEx
CAUpdateCA
CACloseCertType
CARemoveCACertificateType
CAGetCAProperty
CAFindByName
CAEnumCertTypes
CAFindCertTypeByName
CAGetCertTypeKeySpec
CAFreeCertTypeProperty
CACreateCertType
CAAddCACertificateType
CACertTypeSetSecurity
CAEnumCertTypesForCA
CACertTypeGetSecurity
CAGetCertTypeProperty
CAFreeCAProperty
CASetCertTypeProperty
CAUpdateCertType
CAGetCertTypeFlags
CAGetCertTypeExtensions
CASetCertTypeKeySpec
CACloseCA
CAEnumNextCertType
CAFreeCertTypeExtensions
CASetCertTypeFlags
CASetCertTypeExtension
comctl32
CreatePropertySheetPageW
PropertySheetW
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ