Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
cb92ffc0d0d0905eb7b1274de57b5af9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
cb92ffc0d0d0905eb7b1274de57b5af9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
cb92ffc0d0d0905eb7b1274de57b5af9_JaffaCakes118
-
Size
186KB
-
MD5
cb92ffc0d0d0905eb7b1274de57b5af9
-
SHA1
4d7df5f17646b628655b2f3f0df37a6c8ee0bdb3
-
SHA256
c99bc18be5b58e344808109b19374ca2d4691109e210900a63ca021bb602f86f
-
SHA512
0191164b011d93e63ba22d6f03a02556f0b8a3a1f0e3df329a0f3bd0b36a6bb4458026c1a85a9b34640c61a94a51ff3d17fcb5e19b7abf01fc89e7c314fc477c
-
SSDEEP
3072:WxymEZpYy5vXTz2eQhBQWAsEa27XKGMK1UUVAyAMt41f8sqgPAICw/:WxymEvD5m1hlrl2DKq1jAIOfVzvC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb92ffc0d0d0905eb7b1274de57b5af9_JaffaCakes118
Files
-
cb92ffc0d0d0905eb7b1274de57b5af9_JaffaCakes118.exe windows:4 windows x86 arch:x86
45161b6ce5eb4e29b9dff62a06820035
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
setupapi
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
user32
EndPaint
RealGetWindowClassA
IntersectRect
CharNextA
UnionRect
SetWindowLongA
CallWindowProcA
wsprintfA
RegisterClassExA
EqualRect
GetWindowLongA
OffsetRect
CreateWindowExA
IsChild
ReleaseDC
GetClientRect
ShowWindow
LoadCursorA
SetWindowRgn
GetKeyState
PtInRect
InvalidateRect
GetParent
BeginPaint
GetFocus
GetClassInfoExA
SetWindowPos
IsWindow
UnregisterClassA
SetFocus
DefWindowProcA
GetDC
DestroyWindow
kernel32
CreateFiber
ExitProcess
RtlUnwind
HeapAlloc
GetLocaleInfoA
VirtualQuery
ResumeThread
VirtualAlloc
HeapSize
GetProcAddress
HeapDestroy
VirtualFree
HeapReAlloc
InterlockedCompareExchange
GetACP
EnumResourceNamesA
GetSystemInfo
LoadLibraryA
UnhandledExceptionFilter
IsProcessorFeaturePresent
SetThreadPriority
GetCommandLineA
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
HeapCreate
VirtualProtect
WriteFile
Sections
.text Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ