Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d5c24860ba344a30d5e45fd02b6207ad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5c24860ba344a30d5e45fd02b6207ad_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d5c24860ba344a30d5e45fd02b6207ad_JaffaCakes118
-
Size
158KB
-
MD5
d5c24860ba344a30d5e45fd02b6207ad
-
SHA1
48a64c133ed4c23323d060815d113347213a9ee1
-
SHA256
91be895fabca0f6b9920b743a16051cb18129e67bad60359f98127654ea97dfd
-
SHA512
f38441a54f542c097ce5ddcd54f168ac444ca81a82c03817a200679c9ae4f9874d163868b0464d2afe87e10af092fc0149010ca22ac15d8bb8f55e0a12002a32
-
SSDEEP
3072:X+E1qWnse9mYtUM6aQKQB2k0Tjng/mn7rUqG/stfGtmtdTE5hhiHQO4k:6+BwYJtNM/ir3GUt+tcCV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5c24860ba344a30d5e45fd02b6207ad_JaffaCakes118
Files
-
d5c24860ba344a30d5e45fd02b6207ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
548aea81669efcd29370723d2b69f4cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
MoveWindow
GetWindowRect
GetWindowInfo
GetWindowLongW
EndDialog
AdjustWindowRect
GetMenuStringW
GetDlgItem
SetWindowsHookExW
SetWindowTextW
SetRect
GetSysColor
MessageBoxW
SendMessageW
gdi32
CreateDIBSection
CreateSolidBrush
SetTextColor
CreateCompatibleBitmap
MoveToEx
CreatePen
GetDeviceCaps
StretchBlt
SetViewportExtEx
CreatePatternBrush
SetViewportOrgEx
GetCharWidthW
GetTextMetricsW
GetObjectW
SetBkColor
CreateFontW
BitBlt
DeleteObject
DeleteDC
LineTo
SelectObject
CombineRgn
SetBkMode
CreateDCW
ExtCreateRegion
CreateCompatibleDC
GetStockObject
shell32
ShellExecuteW
kernel32
FreeLibrary
MultiByteToWideChar
GetVDMCurrentDirectories
FindFirstFileW
GetLocalTime
ReadFile
GetUserDefaultUILanguage
SetThreadPriorityBoost
GetCurrentProcessId
DeleteFileW
EnumResourceNamesW
ExitProcess
SetFilePointer
CreateProcessW
WriteFile
OutputDebugStringW
HeapAlloc
WideCharToMultiByte
GetProcAddress
SetUnhandledExceptionFilter
GetModuleHandleA
CreateFileA
MoveFileW
FindClose
LoadLibraryW
HeapFree
advapi32
RegCreateKeyExW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
RegDeleteKeyA
msvfw32
ICInfo
comctl32
ImageList_ReplaceIcon
ImageList_Draw
ImageList_Create
ImageList_Destroy
comdlg32
GetSaveFileNameW
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ