Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d096ee783772e6d9b03cf9937fad1673_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d096ee783772e6d9b03cf9937fad1673_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d096ee783772e6d9b03cf9937fad1673_JaffaCakes118
-
Size
279KB
-
MD5
d096ee783772e6d9b03cf9937fad1673
-
SHA1
63c785faff0940313971eea23f06e59b845668a6
-
SHA256
8dbd7313ccca75f76f9b180f1a0285af37d160b26d0cf60d90c541315a473549
-
SHA512
67ee1601afa10f9e62d23ec8f46cfab36fd3b9846a1823c558dfd1d7e2b2a21c1a850d047adc76b7a8c721ed60daa21e36b27b93c87bde912d93047b5e271d14
-
SSDEEP
6144:mLFmrTgnaZioBLy1hTH6Tzs/QccXMahBuB1O4jbnRWwtbC:mL0wmBPs6XiBgun1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d096ee783772e6d9b03cf9937fad1673_JaffaCakes118
Files
-
d096ee783772e6d9b03cf9937fad1673_JaffaCakes118.exe windows:4 windows x86 arch:x86
aee4b549a7c59c241c912460b6d27999
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GetVersionExW
GetSystemTime
CreateFileMappingA
GetExitCodeProcess
CreateFileW
GetTempPathW
GetFileAttributesW
CreateDirectoryW
LocalFree
CreateProcessW
GetModuleHandleW
CreateEventA
MoveFileExW
GetCurrentThreadId
FileTimeToLocalFileTime
GetEnvironmentVariableW
GetCommandLineA
CloseHandle
DeleteFileW
SetEvent
WriteConsoleW
EnumResourceNamesA
GetSystemDirectoryW
WaitForSingleObject
UnmapViewOfFile
LocalAlloc
ReadFileScatter
CreateThread
CreateWaitableTimerA
CopyFileW
LoadLibraryExW
FileTimeToSystemTime
MapViewOfFile
SetFileAttributesW
ResetEvent
CreateFileA
lz32
LZClose
LZCopy
LZOpenFileA
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
advapi32
RegEnumKeyExA
RegQueryValueA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
Sections
.text Size: 142KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ