Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d76d39c59aa86990c4b93df62a066774_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
d76d39c59aa86990c4b93df62a066774_JaffaCakes118
-
Size
162KB
-
MD5
d76d39c59aa86990c4b93df62a066774
-
SHA1
00c538a5e1a6bad55768998b44f99c6ae56633cf
-
SHA256
05c80405e3db755a4e5ae985f7c32bc7d1039e36278dd1f845e1e07a34e2bf41
-
SHA512
4aa7f240b55d310fa41839ed29ac9048ff1e1326f556df921b7585eeecc8db6e72986e6a3be1eb8fe0adfaca1b687826e20e78b4e3cfabdebc4d18c445340eb4
-
SSDEEP
3072:gWtPChgcBSEWv1Jvo7MhpJvdQyj4mhDCVP5i0H0/xq0mKgDqSm5Z8pQEeq:JPzn1RVzvdz4LU/x4mvEZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d76d39c59aa86990c4b93df62a066774_JaffaCakes118
Files
-
d76d39c59aa86990c4b93df62a066774_JaffaCakes118.exe windows:4 windows x86 arch:x86
5c47de80f5654793a43f99143da7013f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
IsBadReadPtr
CloseHandle
lstrcmpiA
GetStringTypeW
AddAtomA
lstrcpynA
MulDiv
EnterCriticalSection
WideCharToMultiByte
IsBadCodePtr
GetEnvironmentStringsW
lstrcatA
lstrlenA
lstrcpyA
GetDiskFreeSpaceA
GetFullPathNameA
LCMapStringA
FreeLibrary
LoadLibraryA
InitializeCriticalSection
GetFileAttributesA
CreateFileA
GetStartupInfoA
EnumResourceNamesW
GetTickCount
GetCPInfo
SetFilePointer
GetProcAddress
FreeEnvironmentStringsA
lstrcmpA
ReadFile
GetEnvironmentStrings
LeaveCriticalSection
VirtualProtect
Sleep
DeleteCriticalSection
lstrlenA
LCMapStringW
GetOEMCP
GetCurrentThreadId
FlushFileBuffers
GetLastError
MultiByteToWideChar
GetModuleHandleA
GetThreadLocale
GetStringTypeA
SetStdHandle
FindFirstFileA
WriteFile
RaiseException
Sections
.text Size: 81KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ