Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
c3a6d12d0ed894ed00cf1cd8e62fe4a1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c3a6d12d0ed894ed00cf1cd8e62fe4a1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
c3a6d12d0ed894ed00cf1cd8e62fe4a1_JaffaCakes118
-
Size
175KB
-
MD5
c3a6d12d0ed894ed00cf1cd8e62fe4a1
-
SHA1
5d3d1bf3a2104a4b84db1bcc33d193deb6ebb56b
-
SHA256
baba2262b26c15f399942f3fc41b49a5fcf52ef04d4bae1b24ee2a648da0ba36
-
SHA512
abe02732dedf3f364f34c87eabf19c1390adfe18c1372d99c76e652275afa7aab16023037f20569018c6c3c9e90527f303113a13d33d377130060562ad40b9c0
-
SSDEEP
3072:9AS6vxbxDyR/GG9eqVmy1ADj8Brj0kU631156yrEc2T6:kVyROGtZAv8Brj0uocO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3a6d12d0ed894ed00cf1cd8e62fe4a1_JaffaCakes118
Files
-
c3a6d12d0ed894ed00cf1cd8e62fe4a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
b2ea353eeb1196e22c629a6e7379e81b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
ICOpen
ICSendMessage
ICDecompress
ICClose
comctl32
CreateToolbarEx
user32
EndPaint
MoveWindow
InvalidateRect
LoadCursorA
CallWindowProcA
OffsetRect
SetWindowLongA
DispatchMessageA
GetWindowLongA
UpdateWindow
RegisterClassA
CreateWindowExA
SetCursor
GetKeyState
PeekMessageA
SendMessageA
TranslateMessage
GetMessageA
SetWindowTextA
DefWindowProcA
GetFocus
IsWindow
wvsprintfA
ShowWindow
GetClientRect
GetClassLongA
ScreenToClient
SubtractRect
SetFocus
BeginPaint
DestroyWindow
LoadIconA
MessageBoxA
GetWindowRect
ReleaseCapture
wsprintfA
SetCapture
gdi32
DeleteObject
SetDIBitsToDevice
StretchDIBits
FillRgn
SetDIBColorTable
GetCurrentObject
CreateCompatibleDC
BitBlt
GetObjectA
CombineRgn
SetStretchBltMode
CreateRectRgn
CreateDIBSection
GetStockObject
DeleteDC
SelectObject
StretchBlt
kernel32
LocalAlloc
CreateFileMappingA
QueryDosDeviceW
ReadFile
DisableThreadLibraryCalls
UnmapViewOfFile
GetProcessId
SetFilePointer
lstrlenA
LocalFree
CloseHandle
ProcessIdToSessionId
EnumResourceTypesA
CreateFileA
GetFileSize
ExitProcess
GlobalSize
GlobalAlloc
Sleep
WriteFile
MapViewOfFile
GlobalFree
avifil32
AVIStreamSetFormat
AVISaveOptions
AVIFileGetStream
AVIFileInit
AVIStreamWrite
AVIStreamInfoA
AVIStreamRelease
AVIFileOpenA
AVIStreamGetFrameClose
AVIFileCreateStreamA
AVIStreamGetFrame
AVIStreamGetFrameOpen
AVIFileRelease
AVIMakeCompressedStream
avicap32
capCreateCaptureWindowA
capGetDriverDescriptionA
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ