Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
cc9dc086fb0bfa15c1bbc2a67185f44f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cc9dc086fb0bfa15c1bbc2a67185f44f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
cc9dc086fb0bfa15c1bbc2a67185f44f_JaffaCakes118
-
Size
174KB
-
MD5
cc9dc086fb0bfa15c1bbc2a67185f44f
-
SHA1
fb6b4470c644bb434ef675ac8c6152fe6bad9e08
-
SHA256
b60c47f55209e39d9f2ef9fe6a8b20324cb5cbe2d7d696fc76cbcd319919608e
-
SHA512
441547a3168505deed5a3a58b0fd81b221d83af67f1e117ac4a6d43a2fea4db8d32df19d3543d58534315698ef493e2dcc995c4d2bab99c9a125012f5b772d72
-
SSDEEP
3072:hgWY2StOg2IXQ7X2CEA5ZR48xGSLYi9h/FA3WygYaYN5W5E1xV9pquB:+TV/KXpFJPki9d633/aWosnouB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc9dc086fb0bfa15c1bbc2a67185f44f_JaffaCakes118
Files
-
cc9dc086fb0bfa15c1bbc2a67185f44f_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7c588b0f0f3ac465e1923265718a1d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LocalFileTimeToFileTime
FileTimeToSystemTime
ConvertFiberToThread
SetEnvironmentVariableW
FreeLibrary
SetCurrentDirectoryW
SetErrorMode
LocalFree
SetThreadIdealProcessor
IsBadReadPtr
GetShortPathNameW
SystemTimeToFileTime
GetCurrentProcess
CompareStringA
FileTimeToLocalFileTime
EnumResourceNamesW
LCMapStringW
FindNextFileW
RegisterWaitForSingleObject
LoadResource
FindResourceW
GetLocalTime
GetStringTypeW
FindClose
LocalAlloc
GetSystemDirectoryW
GetOEMCP
FindFirstFileW
SearchPathW
user32
IsWindowEnabled
FlashWindow
GetCapture
ExcludeUpdateRgn
RealGetWindowClassA
UpdateWindow
DestroyWindow
ReleaseCapture
SetCapture
ValidateRect
InvalidateRgn
IsWindow
EnableWindow
ValidateRgn
GetUpdateRgn
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 512B - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ