Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d746ed616e2b46bb11331fe34b2b2982_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d746ed616e2b46bb11331fe34b2b2982_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d746ed616e2b46bb11331fe34b2b2982_JaffaCakes118
-
Size
154KB
-
MD5
d746ed616e2b46bb11331fe34b2b2982
-
SHA1
4b4e43dceac86abcde1049db0ac13b0dfb49f037
-
SHA256
bbf473f2a751ab98548acfbd17c14d6bfdaed02bb4f170d4a0b239f257e60532
-
SHA512
8ba9bbfa2bc16e3fb782a54d9559a5c6f899ae7b67c19fa1062191db3a991fa474c176a5a1d3e954d4290af03d23c5d9eab7d90c967a7e0b88bfb0c41574bca1
-
SSDEEP
3072:d1aNLwIWD2m9VfZzDYVzGYrhWqLtn62ImCzQWossLBPWRbfoHb61tjweG0:L19VfWwYZh67rkWqLERbAHb61t/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d746ed616e2b46bb11331fe34b2b2982_JaffaCakes118
Files
-
d746ed616e2b46bb11331fe34b2b2982_JaffaCakes118.exe windows:4 windows x86 arch:x86
2ce1969abd428f050416d138b2cda891
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
lstrcpyA
WideCharToMultiByte
GetLastError
lstrcpyA
GlobalFree
GetProcessAffinityMask
lstrcpyW
OutputDebugStringW
EnumResourceNamesW
GlobalAlloc
MultiByteToWideChar
lstrlenW
GetACP
FindClose
FreeEnvironmentStringsW
GetCPInfo
GetTickCount
LockResource
lstrcmpiW
InitializeCriticalSection
GetModuleHandleW
user32
SetTimer
wsprintfW
GetDC
KillTimer
TranslateMessage
GetMessageW
DispatchMessageW
CharNextW
CharUpperW
SendMessageA
PostThreadMessageW
UnregisterClassA
shlwapi
PathCombineW
PathFileExistsW
ole32
CoRegisterClassObject
CoTaskMemRealloc
CoRevokeClassObject
CoCreateInstance
CoUninitialize
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
StringFromCLSID
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ