Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e4e2d88e8c7740581f300995189d0393_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e4e2d88e8c7740581f300995189d0393_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
e4e2d88e8c7740581f300995189d0393_JaffaCakes118
-
Size
168KB
-
MD5
e4e2d88e8c7740581f300995189d0393
-
SHA1
13a88b3a57190a10838aa92aae1b649443e9549b
-
SHA256
7215ca9d1a38ffa31663e43d869958a9cda47e5b4f76b1ae8e010152e5da1924
-
SHA512
ca838530a6ebe2e983bc09e1f8e66738306d2bf17124b99e8c23a660cb404d2072611350a4690caa33124d6d0a9665ad97f265d8e76357768eadbb918a8a62b9
-
SSDEEP
3072:S5Wt/iXE2F7S0nmJqPTsEof4R88yz7FzxTiiisHs2fKnqIBYaFIDe3i:SUt/uPdqJqPYEc4WD7FzEbYaFIDeS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4e2d88e8c7740581f300995189d0393_JaffaCakes118
Files
-
e4e2d88e8c7740581f300995189d0393_JaffaCakes118.exe windows:4 windows x86 arch:x86
38295ea7c0b3fa8c04fc26c354725ffb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
GetDeviceCaps
CreateFontIndirectW
DeleteObject
kernel32
UnhandledExceptionFilter
FreeEnvironmentStringsA
SetStdHandle
GetCurrentProcess
GetVersion
InitializeCriticalSection
GetCPInfo
HeapAlloc
GetLastError
InterlockedExchange
GetStartupInfoW
HeapCreate
LoadResource
WriteConsoleW
VirtualFree
LCMapStringA
CreateSemaphoreW
WriteConsoleA
WriteConsoleInputVDMA
ExitProcess
DeleteFileW
GetVersionExA
CopyFileW
LoadLibraryExW
RtlUnwind
IsProcessorFeaturePresent
GetStdHandle
CreateProcessW
GetSystemTimeAsFileTime
LockResource
VirtualAlloc
CloseHandle
MulDiv
TlsSetValue
GetDriveTypeW
GetProcessHandleCount
GetEnvironmentStringsW
GetThreadLocale
lstrlenA
LCMapStringW
GetACP
GetConsoleMode
GetEnvironmentStrings
HeapFree
InterlockedCompareExchange
GetFileSize
LoadLibraryA
GetCommandLineW
LocalAlloc
GetStartupInfoA
FlushFileBuffers
GetOEMCP
GetStringTypeA
HeapReAlloc
FindResourceW
GetVersionExW
GetStringTypeW
CreateFileW
EnumResourceNamesA
WaitForSingleObject
SetLastError
GetConsoleCP
TlsAlloc
InterlockedIncrement
lstrcmpA
GetFileAttributesW
GetModuleHandleA
LoadLibraryW
lstrcmpiW
HeapDestroy
FreeLibrary
GetModuleHandleW
WriteFile
QueryPerformanceCounter
GetFileType
FlushInstructionCache
SizeofResource
GetProcAddress
ReadFile
GetModuleFileNameW
SetFilePointer
LocalFree
GetTickCount
FreeEnvironmentStringsW
InterlockedDecrement
GetModuleFileNameA
GetCurrentProcessId
LeaveCriticalSection
Sleep
WritePrivateProfileSectionW
GetCommandLineA
WideCharToMultiByte
TlsGetValue
GetCurrentThreadId
GetLocaleInfoA
TlsFree
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
SetHandleCount
CreateFileMappingW
DeleteCriticalSection
GetConsoleOutputCP
GetProcessHeap
CreateFileA
RaiseException
GetSystemDirectoryW
lstrlenW
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
user32
GetParent
GetClassInfoExW
GetDC
CreateWindowExW
EndPaint
SystemParametersInfoW
RegisterClassExW
DestroyWindow
GetWindowTextLengthW
BeginPaint
GetWindow
GetDlgItemTextW
LoadCursorW
GetDlgItem
MessageBoxW
DispatchMessageW
GetClientRect
MapWindowPoints
SetWindowTextW
TranslateMessage
GetWindowInfo
SetCapture
GetWindowRect
PeekMessageW
SetDlgItemTextW
SetWindowPos
EndDialog
oleacc
LresultFromObject
CreateStdAccessibleObject
ole32
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoInitialize
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ