Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
dd861d2584a7f9ace519217dac5b6491_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
dd861d2584a7f9ace519217dac5b6491_JaffaCakes118
-
Size
171KB
-
MD5
dd861d2584a7f9ace519217dac5b6491
-
SHA1
1989054faeb8eb020b28caf2f806e43ca2562243
-
SHA256
3c6e64530090d7512859acd5dbee517cecbe74875c8d485cb73e514fb172123c
-
SHA512
94595527ee1b6f383e5f54e1d0b58102b0c3776dfbb05aa138c6b397853cc6ac5b17ce6c84987b9ed979f5e901dd228d2a21da6c5fcd1400854b0dc07ffd1530
-
SSDEEP
3072:uMXe2Klg0YHb6SiH7PUYpMaTzCPdcGq9zT6DsORMQ7c2Anx:ygt6SuPUn8C1vq9n6Jl7c2G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd861d2584a7f9ace519217dac5b6491_JaffaCakes118
Files
-
dd861d2584a7f9ace519217dac5b6491_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eca2155a84af89475591ec2a46edfe7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
IsValidCodePage
GlobalGetAtomNameA
HeapSize
GetACP
RtlUnwind
TlsAlloc
GetCPInfo
GetLocaleInfoA
GetTimeFormatA
TlsSetValue
EnumResourceNamesA
GetDateFormatA
VirtualAlloc
SetStdHandle
CreateDirectoryExA
MultiByteToWideChar
SetFilePointer
GetOEMCP
GetConsoleOutputCP
TlsGetValue
WriteConsoleA
RaiseException
user32
CharNextA
MessageBoxA
LoadStringA
GetDesktopWindow
DispatchMessageA
DispatchMessageW
PeekMessageA
wsprintfA
shell32
SHGetFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFileInfoA
ShellExecuteExA
DragAcceptFiles
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteA
Shell_NotifyIconA
rpcrt4
RpcStringFreeA
Sections
.text Size: 83KB - Virtual size: 478KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ