Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d745c96c93f748979cbb107c83b14b47_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
d745c96c93f748979cbb107c83b14b47_JaffaCakes118
-
Size
188KB
-
MD5
d745c96c93f748979cbb107c83b14b47
-
SHA1
43600e493360d35ca36a37f25aaaa0300b800e39
-
SHA256
081b1d2bf111ffb73c006898c0d780ebf94fd0f588b6682141a2e8d008eb2436
-
SHA512
7044785b3c8331c9a5fa2d6ae80a8dec765b56d9bbb54c32103c135f779935d73b20ecd57d62a1f98ec257144cdecf551de9c0735a11f15989653b24fe406ac6
-
SSDEEP
3072:NCDtmPfvI6ZSnltQiOWChJE5megaGuTKhFKsbiQjoiDedMd/0AwX6Jgb1IP8M6L9:NPPI6ZSlwWE1zaNTK6sbiQjoXUMAwKJM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d745c96c93f748979cbb107c83b14b47_JaffaCakes118
Files
-
d745c96c93f748979cbb107c83b14b47_JaffaCakes118.exe windows:4 windows x86 arch:x86
a3c9a3c731479bdaef70299328deebf4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GlobalFindAtomA
GetLocaleInfoA
GetOEMCP
GetACP
ExitProcess
GetCommandLineA
GetThreadLocale
VirtualQuery
LeaveCriticalSection
InitializeCriticalSection
GetTickCount
RtlUnwind
HeapReAlloc
GetVersionExA
VirtualProtect
VirtualAlloc
GetStartupInfoA
QueryPerformanceCounter
UnhandledExceptionFilter
GetFileType
EnumResourceNamesA
TlsGetValue
InterlockedExchange
FreeEnvironmentStringsA
GetCPInfo
TlsFree
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeW
EnterCriticalSection
WriteFile
lstrlenW
GetSystemInfo
GetStdHandle
RaiseException
WideCharToMultiByte
TlsSetValue
GetEnvironmentStringsW
SetHandleCount
HeapSize
DeleteCriticalSection
rpcrt4
RpcStringFreeA
shlwapi
SHGetInverseCMAP
SHCreateStreamOnFileEx
PathIsContentTypeA
PathAppendA
PathIsFileSpecA
PathCreateFromUrlW
Sections
.text Size: 95KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ