Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e31365389f5f5e141fb10ce51a6ffa52_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e31365389f5f5e141fb10ce51a6ffa52_JaffaCakes118
-
Size
189KB
-
MD5
e31365389f5f5e141fb10ce51a6ffa52
-
SHA1
5e1ea0e56b37258753beb96c08b6c41600a61150
-
SHA256
862a5b766c2441711a4234ce484686232b7e2603d19acbc1ba78cba59209e18b
-
SHA512
a9dac40f4633a9d1567ef9e28f929df19c0d6aeabca99c7bb1393fd1a02c28ef38f1c249b5ba539cb2f980fe91a41cbb0092db9cad2139b651ed17804f451a83
-
SSDEEP
3072:0NajUUQ5axqHGocYFZY0a0NjFI/xJ8hlUHcHJeMxKY/:asiG6TYKN+v8MYX/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e31365389f5f5e141fb10ce51a6ffa52_JaffaCakes118
Files
-
e31365389f5f5e141fb10ce51a6ffa52_JaffaCakes118.exe windows:4 windows x86 arch:x86
b073bf5c003dfb9ca43d85f9caca5702
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
oleacc
CreateStdAccessibleObject
kernel32
UnhandledExceptionFilter
GlobalFindAtomW
GetSystemTimeAsFileTime
GetModuleHandleW
SetUnhandledExceptionFilter
InterlockedCompareExchange
GetStartupInfoA
IsDebuggerPresent
GetCurrentProcess
GetCurrentProcessId
QueryPerformanceCounter
FoldStringW
EnumResourceLanguagesA
GetProcessHeap
VirtualProtect
GetCurrentThreadId
GetPrivateProfileSectionW
LocalAlloc
GetLocaleInfoW
InterlockedExchange
GetTickCount
TerminateProcess
DeleteFileW
shlwapi
GetAcceptLanguagesA
StrCmpIW
PathCreateFromUrlW
PathIsRelativeW
PathRemoveFileSpecW
PathAppendW
UrlUnescapeW
PathFindExtensionW
UrlCreateFromPathW
PathCombineW
Sections
.text Size: 101KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ