Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e2a8c88ff29931aefcd244c8717e66ac_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
e2a8c88ff29931aefcd244c8717e66ac_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
e2a8c88ff29931aefcd244c8717e66ac_JaffaCakes118
-
Size
182KB
-
MD5
e2a8c88ff29931aefcd244c8717e66ac
-
SHA1
6cc66afbb638baf72c0843e60572b0d5f2e97949
-
SHA256
b9c6548132ef29cd77a3ca881ab8fde9b19b37c604f8224b1379b220f1765176
-
SHA512
82c4f8ae58e079db6464b90c93585fb70085bcae48cd1408664987916912bad7d89e0e30e36413f8b9159db65d10feb68e8b222c61447d8476b3de71633e0437
-
SSDEEP
3072:WDMOhfDaJ5OU4AxIatRyL2kTl63DeujETrB4GluHdMlIeLA:W4uLs5ON5yRLks3Dek0B7uHClfA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2a8c88ff29931aefcd244c8717e66ac_JaffaCakes118
Files
-
e2a8c88ff29931aefcd244c8717e66ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
14ac565e9bbc86bf8003932d12126fcf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW
kernel32
RaiseException
LCMapStringA
GetCurrentDirectoryW
IsDebuggerPresent
GetUserDefaultLCID
GetConsoleOutputCP
GlobalAlloc
GetThreadPriority
HeapFree
GetLocaleInfoW
MultiByteToWideChar
GetProcAddress
WriteFile
GetCommandLineA
GetCPInfo
HeapSize
GetLastError
LeaveCriticalSection
GetProcessHeap
SetStdHandle
SetCommConfig
EnumSystemLocalesA
ReadFile
EnterCriticalSection
EnumResourceNamesA
HeapReAlloc
GetModuleHandleA
InterlockedIncrement
TerminateProcess
InitializeCriticalSection
CreateFileA
RtlUnwind
LCMapStringW
DeleteCriticalSection
SetEndOfFile
GetCurrentProcess
WideCharToMultiByte
HeapAlloc
UnhandledExceptionFilter
GetCurrentThreadId
GetVersionExA
ExitProcess
Sleep
IsValidCodePage
GetModuleFileNameW
CloseHandle
WriteConsoleW
ExitProcess
IsValidLocale
WriteConsoleA
SetUnhandledExceptionFilter
GetFullPathNameW
InterlockedDecrement
GetFullPathNameA
user32
GetClassLongA
MessageBoxW
advapi32
RegCloseKey
RegCreateKeyExW
RegSetValueExW
rpcrt4
UuidCreate
ole32
CoInitialize
CoUninitialize
CoCreateInstance
StringFromGUID2
CoCreateGuid
CoSetProxyBlanket
Sections
.text Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ