Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d54dd394db41cf95dca5d9d1f07e544c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d54dd394db41cf95dca5d9d1f07e544c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d54dd394db41cf95dca5d9d1f07e544c_JaffaCakes118
-
Size
175KB
-
MD5
d54dd394db41cf95dca5d9d1f07e544c
-
SHA1
79ff14e4d6d286d3e9e714d7adf5f1e23c4b5555
-
SHA256
a514b1f8445283de553ab005cf3a6d3936e72a61317a1e383712e5b88600de00
-
SHA512
ee2a83e14aaf33fd2cfb2c4df5a38c37b5a0f2afd3972fe4c2403e5ba94f74f7c744654731b6695b6ef0c26d4fa06e1c9f22273b0f21698952d23d9aefcb1cf2
-
SSDEEP
3072:uiqHCjjlKzGif18TNDKtgaguyTqkBod96P+AY5TxcunFpGlTT:rqHKczD8T5KtgpzqoY9o+F5NccsT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d54dd394db41cf95dca5d9d1f07e544c_JaffaCakes118
Files
-
d54dd394db41cf95dca5d9d1f07e544c_JaffaCakes118.exe windows:4 windows x86 arch:x86
063aed23a3c52e80e3a65e0e9c1925c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHGetFileInfoW
SHFileOperationW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
user32
InvalidateRect
CreateDialogParamW
GetClientRect
EndDialog
GetSysColor
GetWindowModuleFileNameW
CallWindowProcW
GetSystemMetrics
TrackPopupMenu
SystemParametersInfoW
GetMessagePos
CreateWindowExW
CreatePopupMenu
MessageBoxIndirectW
GetDC
CheckDlgButton
FillRect
IsWindow
CharUpperW
CloseClipboard
SetClassLongW
PostQuitMessage
SetCursor
LoadBitmapW
wsprintfW
IsWindowVisible
IsWindowEnabled
GetSystemMenu
SetTimer
CharNextW
wsprintfA
SetWindowTextW
GetDlgItemTextW
DialogBoxParamW
CharNextA
ExitWindowsEx
EmptyClipboard
OpenClipboard
SetWindowPos
DrawTextW
EnableMenuItem
DefWindowProcW
LoadCursorW
SetClipboardData
SendMessageW
ShowWindow
LoadImageW
DispatchMessageW
AppendMenuW
GetClassInfoW
SendMessageTimeoutW
EnableWindow
CharPrevW
SetForegroundWindow
PeekMessageW
GetWindowRect
EndPaint
FindWindowExW
BeginPaint
SetWindowLongW
SetDlgItemTextW
GetDlgItem
DestroyWindow
RegisterClassW
ScreenToClient
kernel32
FindNextFileW
lstrcmpW
OpenProcess
CreateProcessW
MulDiv
GetFullPathNameW
FindFirstFileW
lstrcpyA
GlobalFree
ExpandEnvironmentStringsW
WriteConsoleInputVDMA
LoadLibraryA
GetCurrentProcess
WritePrivateProfileStringW
lstrcpynW
FindClose
Sleep
CreateDirectoryW
lstrcpynA
GetModuleHandleW
GetModuleFileNameW
GetFileSize
GetProcessHandleCount
LoadLibraryW
CreateThread
LoadLibraryExW
FreeLibrary
lstrcmpiW
MoveFileW
MultiByteToWideChar
ExitProcess
SetErrorMode
GlobalUnlock
SetCurrentDirectoryW
DeleteFileW
lstrlenW
lstrcatW
GetProcAddress
GetTempFileNameW
EnumResourceNamesA
GetVersion
CreateFileW
GetModuleHandleA
GetDiskFreeSpaceW
SetFilePointer
WriteFile
GetPrivateProfileStringW
lstrcmpiA
lstrcpyW
GetVersionExW
GetExitCodeProcess
CompareFileTime
GetTempPathW
GetWindowsDirectoryW
ReadFile
GetTickCount
CloseHandle
FreeEnvironmentStringsW
lstrlenA
GetFileAttributesW
GlobalLock
WideCharToMultiByte
RemoveDirectoryW
SetFileAttributesW
GlobalAlloc
GetShortPathNameW
CopyFileW
GetLastError
SearchPathW
GetCommandLineW
WaitForSingleObject
GetSystemDirectoryW
SetFileTime
gdi32
DeleteObject
CreateFontIndirectW
CreateBrushIndirect
SetTextColor
SelectObject
GetDeviceCaps
SetBkMode
SetBkColor
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
ole32
CoCreateInstance
OleInitialize
OleUninitialize
CoTaskMemFree
advapi32
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyW
oleacc
LresultFromObject
CreateStdAccessibleObject
comctl32
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ