Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d111cd5dbd533eeb4bf8679ffdafff71_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
d111cd5dbd533eeb4bf8679ffdafff71_JaffaCakes118
-
Size
351KB
-
MD5
d111cd5dbd533eeb4bf8679ffdafff71
-
SHA1
648193e9cbe62d3b7a9cee366e7797a19bc8ff3a
-
SHA256
07430970b0c7ddad8d4a6b7d6a5eaec30b69fb9561ae7f2de57e97984fabbc5b
-
SHA512
0d0be3a63b23e08ae9322d1729313d5374333d0a97eb55a83a437ea0aeed8e26094522dcc7829a43ddf2ece68c4a2363998a3f5770cb1b53f52b175d47c1902b
-
SSDEEP
6144:mdpNUqf+im0aR2iIPXo6+6lWW8CR7RUduyzG6HzU30LTC7k:mLSXlGO26CR7uduyzvJo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d111cd5dbd533eeb4bf8679ffdafff71_JaffaCakes118
Files
-
d111cd5dbd533eeb4bf8679ffdafff71_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.uf3B Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.R67W Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pAeS Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 281KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE