Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e85fa12ac36d0bb243227325072eee77_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e85fa12ac36d0bb243227325072eee77_JaffaCakes118
-
Size
165KB
-
MD5
e85fa12ac36d0bb243227325072eee77
-
SHA1
d12d5f59c3bbb4f779e90b2cb6fbd1ce710bf795
-
SHA256
b5778f8e8fcc1d06f0a684a383883f83ced63f980573463eba2381c09bf1e19d
-
SHA512
a8cf247c95af609557041cc88c3cb1e3cd34bbeb4b85422c5615d9476b8fd06d056b4e379136f14bf250dd166975ea3f9accaa0f9ed912b62436dc1be62bfbf0
-
SSDEEP
3072:XBOz/2NsqcjZ/A8JCFtPdIkR6ZgLDPVT7m4nPfkQZO:RaGcjegCjPdd6yF7m4PfB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e85fa12ac36d0bb243227325072eee77_JaffaCakes118
Files
-
e85fa12ac36d0bb243227325072eee77_JaffaCakes118.exe windows:4 windows x86 arch:x86
7c91f1368286e6b78457bf3064a39c02
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
GetCurrentProcess
SetUnhandledExceptionFilter
GetCalendarInfoW
GetProcessHeap
LocalAlloc
Sleep
GetCurrentProcessId
IsDebuggerPresent
HeapSize
lstrlenW
GetStdHandle
CreateProcessA
TerminateProcess
InterlockedExchange
CreateFileW
LoadLibraryExW
LoadLibraryW
GetSystemTimeAsFileTime
GetTickCount
CloseHandle
GetThreadLocale
GetEnvironmentVariableA
GetACP
EnumResourceNamesA
WriteFile
HeapDestroy
WideCharToMultiByte
MultiByteToWideChar
FindFirstFileW
lstrlenA
UnhandledExceptionFilter
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
RaiseException
InterlockedCompareExchange
GetLocaleInfoA
QueryPerformanceCounter
HeapAlloc
SystemTimeToFileTime
HeapReAlloc
HeapFree
GetSystemTime
lstrcpynW
winmm
mciSendCommandA
sndPlaySoundA
ole32
CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
user32
GetDC
GetWindowInfo
MoveWindow
GetWindowLongA
LoadCursorA
ReleaseDC
ReleaseCapture
GetSysColor
SetWindowLongA
SetWindowPos
SetCursor
IsWindow
FillRect
GetDlgItem
SetCapture
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ