Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
cefec42acc092a5588221b10f29c36e7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cefec42acc092a5588221b10f29c36e7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
cefec42acc092a5588221b10f29c36e7_JaffaCakes118
-
Size
162KB
-
MD5
cefec42acc092a5588221b10f29c36e7
-
SHA1
873e8e6d3c3ba5006ae7811bc31c9da751e66926
-
SHA256
b61c1915025bf4252ee8f101ed2c392546466301584d6e93b72e49144ff39a5d
-
SHA512
3b5772b51658efde3f1701c3d97cd1543c6f59c25ac5aaefa35dce90f5ffe721606f27c053673261f967a0f459e43b3f795e2385fbfcbe9e2f33a57680780b80
-
SSDEEP
3072:8PyCt4CRzcJefyCj4s4Ln79U/46tejvxh/YqmwSf6KChmEFlsaN1ecxu/Vq3:CyKQef/4sGxjvxhrKklsG1esu/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cefec42acc092a5588221b10f29c36e7_JaffaCakes118
Files
-
cefec42acc092a5588221b10f29c36e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
10ab2cc3e72d02f8c5fa50c2b0c6a204
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
user32
SetWindowTextW
RegisterClassExW
GetClassInfoExW
TranslateMessage
DestroyWindow
DispatchMessageW
GetClientRect
MessageBoxW
GetWindowInfo
SetWindowPos
PeekMessageW
GetParent
GetDlgItemTextW
SetDlgItemTextW
CreateWindowExW
LoadCursorW
GetWindowTextLengthW
MapWindowPoints
GetWindowRect
GetWindow
SystemParametersInfoW
BeginPaint
EndPaint
GetDC
GetDlgItem
SetCapture
EndDialog
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
LoadLibraryExW
FreeLibrary
InterlockedExchange
ExitProcess
GetVersionExW
GetStringTypeA
GetModuleFileNameA
GetStartupInfoA
LCMapStringA
LocalAlloc
GetModuleFileNameW
WriteConsoleInputVDMA
WriteFile
WritePrivateProfileSectionW
GetDriveTypeW
lstrlenA
GetCommandLineW
LoadLibraryA
DeleteCriticalSection
LocalFree
lstrcmpA
GetFileSize
TlsSetValue
LoadLibraryW
GetModuleHandleA
GetProcessHandleCount
FindResourceW
GetConsoleOutputCP
GetFileAttributesW
ReadFile
GetVersion
CloseHandle
GetConsoleMode
GetCPInfo
GetStdHandle
IsDebuggerPresent
IsProcessorFeaturePresent
SetStdHandle
GetCurrentThreadId
GetProcessHeap
UnhandledExceptionFilter
GetCurrentProcessId
SetLastError
SetFilePointer
GetConsoleCP
GetThreadLocale
HeapSize
CreateFileA
GetLastError
VirtualAlloc
SizeofResource
EnumResourceNamesA
FlushInstructionCache
CopyFileW
RaiseException
GetCurrentProcess
InterlockedCompareExchange
GetOEMCP
GetLocaleInfoA
GetSystemTimeAsFileTime
WideCharToMultiByte
GetEnvironmentStrings
GetSystemDirectoryW
GetProcAddress
MulDiv
SetUnhandledExceptionFilter
GetACP
GetCommandLineA
TlsAlloc
CreateSemaphoreW
VirtualFree
CreateProcessW
TlsGetValue
InterlockedDecrement
GetVersionExA
WriteConsoleA
RtlUnwind
GetTickCount
HeapDestroy
FreeEnvironmentStringsW
DeleteFileW
SetHandleCount
LCMapStringW
QueryPerformanceCounter
GetStringTypeW
GetEnvironmentStringsW
InterlockedIncrement
LockResource
LeaveCriticalSection
HeapAlloc
HeapCreate
Sleep
WaitForSingleObject
CreateFileMappingW
CreateFileW
lstrcmpiW
FlushFileBuffers
GetFileType
WriteConsoleW
TlsFree
HeapReAlloc
GetStartupInfoW
HeapFree
LoadResource
InitializeCriticalSection
GetModuleHandleW
FreeEnvironmentStringsA
lstrlenW
shell32
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ