Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
dbdf13270adabecd0b98d63112bb426b_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
dbdf13270adabecd0b98d63112bb426b_JaffaCakes118
-
Size
183KB
-
MD5
dbdf13270adabecd0b98d63112bb426b
-
SHA1
32b3f12d92e330fa581877a841f7b5a93a9ea127
-
SHA256
c993d4020006ebb34e761d0c95a8a8ae1e344b4f6c390b2303c4ae08dd5b84fe
-
SHA512
78d701b3d95ef92e04b1a468c427a3ea76d552c3be8091396820688d0eecad60e1296c39d6edb15ef829ad6aec4d9f83616e3f2e995ac7842a380623313d4505
-
SSDEEP
3072:Mf3ZM5wD0eDxS7txhF7BiOk+5cOWAuEA7LNr3lsT6O8vaUO/NwbX850pMIWqojEW:SpM5MSJxhdBiOk+5cOvA7LR46O8v5Zit
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbdf13270adabecd0b98d63112bb426b_JaffaCakes118
Files
-
dbdf13270adabecd0b98d63112bb426b_JaffaCakes118.exe windows:4 windows x86 arch:x86
0078910ffb1a5af130aa95ee95c48c47
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegCloseKey
RegSetValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyW
RegDeleteKeyW
RegEnumKeyExW
user32
RegisterClassExW
RegisterDeviceNotificationW
KillTimer
CreateWindowExW
SetTimer
UnregisterDeviceNotification
LoadCursorW
SendMessageW
IsWindow
DestroyWindow
DefWindowProcW
wsprintfW
shlwapi
PathAddBackslashW
PathFindExtensionW
PathRemoveExtensionW
PathGetDriveNumberW
PathFileExistsW
PathFindFileNameW
ole32
CoGetProcessIdentifier
StringFromGUID2
CoTaskMemFree
CoInitialize
GetRunningObjectTable
CoFreeUnusedLibraries
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CreateItemMoniker
kernel32
GlobalFree
GetCalendarInfoW
InterlockedCompareExchange
GetSystemDirectoryA
WideCharToMultiByte
WaitForSingleObject
GetCurrentProcess
SetCurrentDirectoryA
GetEnvironmentVariableW
GetProfileStringW
GetModuleFileNameA
TlsFree
TerminateProcess
CreateSemaphoreA
QueryPerformanceCounter
DeleteFileW
ReleaseMutex
GetFileSize
UnhandledExceptionFilter
CreateMutexA
GetCurrentDirectoryA
EnumResourceNamesA
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcmpW
TlsSetValue
GetCurrentThreadId
MultiByteToWideChar
ReadFile
InitializeCriticalSection
GlobalAlloc
lstrlenW
GlobalLock
GetTempPathW
GlobalSize
IsDebuggerPresent
ReleaseSemaphore
SetUnhandledExceptionFilter
GetProcAddress
GetWindowsDirectoryA
TlsGetValue
GetLocalTime
GlobalUnlock
RaiseException
wmvcore
WMCreateProfileManager
ddraw
DirectDrawCreateEx
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ