Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
dc08b5c958a76bbed8818863783cbf73_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
dc08b5c958a76bbed8818863783cbf73_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
dc08b5c958a76bbed8818863783cbf73_JaffaCakes118
-
Size
181KB
-
MD5
dc08b5c958a76bbed8818863783cbf73
-
SHA1
8eab379b76d2970e65ccd976db4b811a4cef77a6
-
SHA256
ef3a1ae6bdfa5a12a531d23bd771b3ae52f97b431a075b6f5aa999f0c9918cad
-
SHA512
8e87b544d31fac83b31cfc224ab53da0a1bb251251c294aa57815bbdf752ee88b6de6bf5417e986b9bcc055f8a88195a3b7ecc8f28ba1d56cce648b6c520d7c2
-
SSDEEP
3072:PuIQzdom1Fi0i6ls58gBseQU34kwfIU2uqzUyudzFb7wnQ:GVzdpQEOprDIkbnuqzULdzFO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc08b5c958a76bbed8818863783cbf73_JaffaCakes118
Files
-
dc08b5c958a76bbed8818863783cbf73_JaffaCakes118.exe windows:4 windows x86 arch:x86
245aeb2290462c8634c2bcbbbcd051e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
comctl32
ImageList_GetIconSize
ImageList_Create
ImageList_DrawEx
ImageList_Add
ImageList_Destroy
user32
DestroyCursor
DefWindowProcW
RegisterClassW
DrawEdge
DestroyIcon
GetSysColorBrush
SetScrollRange
SetClipboardData
ToAscii
RealGetWindowClass
IsClipboardFormatAvailable
UnhookWindowsHookEx
SetWindowPos
WinHelpW
ClipCursor
SetWindowsHookExW
ChildWindowFromPoint
CallNextHookEx
EmptyClipboard
GetSysColor
kernel32
GetFileType
CreateFiber
LockFile
SearchPathW
VerLanguageNameW
TerminateProcess
SetEndOfFile
FileTimeToSystemTime
IsDBCSLeadByte
GetUserDefaultLangID
UnlockFile
CompareStringW
GetProfileStringW
EnumResourceNamesA
GetVolumeInformationW
FlushFileBuffers
LocalAlloc
FlushFileBuffers
GetFileAttributesA
GetSystemTime
FindResourceExA
GetFileTime
GetVersionExW
FileTimeToLocalFileTime
GetSystemDirectoryW
comdlg32
GetFileTitleA
rpcrt4
NdrClientCall
RpcBindingSetAuthInfoA
RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcStringFreeA
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ