Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e071758cda118bd560e386cc346afc0d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e071758cda118bd560e386cc346afc0d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
e071758cda118bd560e386cc346afc0d_JaffaCakes118
-
Size
193KB
-
MD5
e071758cda118bd560e386cc346afc0d
-
SHA1
0542052593e85c5aca8fd0f7a98e4ed6c24ad861
-
SHA256
3c2f4d5670d70eb07264e142c870f66d168842cf6f9e783e7a41093f2f27566f
-
SHA512
7b7c04f719b27ef47d45d1dc821e0b51a8ab47ed2c9bf6a04f668b577dbaad58e86b094bd18f3edfceaee605c00534f7d2012c0cdfd771d6342a5bb513b6e7af
-
SSDEEP
6144:scWG2K8+lZjDVanO1xzJscAjMd3V2ezaz4v90du:sVGFrnt1kAza8vwu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e071758cda118bd560e386cc346afc0d_JaffaCakes118
Files
-
e071758cda118bd560e386cc346afc0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
dde971e573bebe0a8a2d185bab93dcb8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
NdrFixedArrayFree
UuidCreate
kernel32
FlushInstructionCache
GetModuleFileNameW
FindFirstFileA
UnmapViewOfFile
EnumResourceNamesW
SetCalendarInfoW
DuplicateHandle
MapViewOfFile
FindResourceExA
FindClose
winmm
timeEndPeriod
shell32
Shell_NotifyIconA
advapi32
RegOpenKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
RegDeleteKeyA
RegSetValueExA
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ