Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e32d431c7e28cf4392cabf071876c830_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e32d431c7e28cf4392cabf071876c830_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
e32d431c7e28cf4392cabf071876c830_JaffaCakes118
-
Size
179KB
-
MD5
e32d431c7e28cf4392cabf071876c830
-
SHA1
5a7e765a22c1b17a367605629c0585a94f4d42c1
-
SHA256
09a79b2d84ce8c6c9ed98ae25dcbfdd8b69edaa2d07e1418a452b622399468de
-
SHA512
0068c9ba1f3ec2fa02401b2f309358a0a001a4019471f13b434a5ac04de2893c482ba911d44b6d73815f879c5d10c93ebad8f1dab94336a3f34a98f06356b382
-
SSDEEP
3072:Qvpp4K6gHfihdTAMqciIrCRSSINuE4uVmqfWVpkmvFbYdupGb3HSbtLnlr+6Z6nZ:yH46HfihdTAMsIrCvhE4uEqEvFbYdefX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e32d431c7e28cf4392cabf071876c830_JaffaCakes118
Files
-
e32d431c7e28cf4392cabf071876c830_JaffaCakes118.exe windows:4 windows x86 arch:x86
864ea17c6a1ed1afe57195812166feca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeW
LCMapStringW
FileTimeToSystemTime
GetLocalTime
CreateFiberEx
LocalAlloc
LocalFileTimeToFileTime
FindNextFileW
GetCurrentProcess
SetThreadAffinityMask
LoadResource
FileTimeToLocalFileTime
EnumResourceNamesW
GetShortPathNameW
GetOEMCP
CompareStringA
FindClose
SetCurrentDirectoryW
IsBadReadPtr
SetErrorMode
LocalFree
SetThreadPriority
SetEnvironmentVariableW
GetSystemDirectoryW
FindResourceW
SystemTimeToFileTime
FreeLibrary
FindFirstFileW
SearchPathW
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
user32
SetCapture
IsWindowEnabled
InvalidateRgn
ValidateRect
EnableWindow
UpdateWindow
ReleaseCapture
DestroyWindow
RealGetWindowClassA
GetCapture
IsWindow
FlashWindow
ValidateRgn
ExcludeUpdateRgn
GetUpdateRgn
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 512B - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ