Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
db7241a0d65a834adc9701d1878d2653_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db7241a0d65a834adc9701d1878d2653_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
db7241a0d65a834adc9701d1878d2653_JaffaCakes118
-
Size
158KB
-
MD5
db7241a0d65a834adc9701d1878d2653
-
SHA1
4510482471b4f1a69635fdddec525d4e907212c4
-
SHA256
4d49f015bd331bf7f5f75b80579179d6185ad9e44855d0db7e5113ff932a50ad
-
SHA512
c02d4d667292c2d0f6f8f6f149603d8dc5210a6a8460b1d30f472bb6f91af5cdad1a57364befd3a68460e69fb47ae0a3bc5e535e706cc94997f304e53402ba8f
-
SSDEEP
3072:+nOyU5aSxU9SCdHkW+5aTFl9GF8Y3QyxoPbV5Eq:EOyU5uSCWWSapl9Vu94H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db7241a0d65a834adc9701d1878d2653_JaffaCakes118
Files
-
db7241a0d65a834adc9701d1878d2653_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b97c28d8cfa03555ac1e8f74c9feab1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
user32
GetDC
MessageBoxW
LoadCursorW
CreateWindowExW
RegisterClassExW
GetUpdateRgn
GetWindowInfo
EndDialog
kernel32
FindFirstVolumeA
TlsFree
GetPriorityClass
TlsAlloc
EnumResourceTypesW
InitializeCriticalSection
GetStartupInfoA
TlsGetValue
HeapCreate
GetFileType
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.apexi Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ