Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d933b96bdbf6362c640d7c97fe9f213a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d933b96bdbf6362c640d7c97fe9f213a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d933b96bdbf6362c640d7c97fe9f213a_JaffaCakes118
-
Size
170KB
-
MD5
d933b96bdbf6362c640d7c97fe9f213a
-
SHA1
727ba56215856493a986a3a0eb0c8b6d338dfed0
-
SHA256
493c11cff84d5664f7a8b80238bfc5e1d40c5c5a534fdcfe3f0f557eb9e1ddb7
-
SHA512
928d2e9d812e2756d0402841c25621d76933d88c218cdeb2d47352b4cd615831944865ed89ae28105f63681501d272aa165b2ec2fa136495ac4667738adfff54
-
SSDEEP
3072:TWTp7FGUqNppEwIXBMB/2Uj3WOrnI5Gg7VVhrY+flZNOR6Z4wk:TWTpZZqhETxMURceSu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d933b96bdbf6362c640d7c97fe9f213a_JaffaCakes118
Files
-
d933b96bdbf6362c640d7c97fe9f213a_JaffaCakes118.exe windows:4 windows x86 arch:x86
4e68bc69899673526af006f3a2c64e87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
wsprintfW
shell32
SHGetSpecialFolderPathA
kernel32
GetShortPathNameA
IsDebuggerPresent
IsBadWritePtr
GetLocaleInfoA
CloseHandle
CreateFileA
ExitProcess
InterlockedExchange
lstrlenA
GetProcessWorkingSetSize
LocalFree
GetSystemTimeAsFileTime
GetACP
InterlockedIncrement
MultiByteToWideChar
InterlockedDecrement
EnterCriticalSection
FreeLibrary
GetTickCount
QueryPerformanceCounter
GetProcAddress
EnumResourceTypesA
GetLastError
LoadLibraryA
DeleteCriticalSection
lstrlenW
GetFileAttributesA
UnhandledExceptionFilter
WideCharToMultiByte
LeaveCriticalSection
GetThreadLocale
InitializeCriticalSection
GetModuleHandleA
GetCurrentThreadId
IsBadReadPtr
SetUnhandledExceptionFilter
GetCurrentProcessId
GetVersionExA
setupapi
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
advapi32
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
ole32
StgCreateDocfile
StgOpenStorage
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ