Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e592235d9285da45dbca563eb48fc60d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e592235d9285da45dbca563eb48fc60d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
e592235d9285da45dbca563eb48fc60d_JaffaCakes118
-
Size
355KB
-
MD5
e592235d9285da45dbca563eb48fc60d
-
SHA1
d07af38934b488281dbfe902fb5b592c1e66dedd
-
SHA256
806bfab45d57f4689f495db991533baeb37b046a08195882546c2aa9aa7d271b
-
SHA512
fb934213210388c08c60b28eac289eb8a6f1950428502546f1f54f1a54dbb90526c4930da05fb1c9c7dd63625b46065ec626e21db24c8490e69fba9ed5ef7c1d
-
SSDEEP
6144:3ssGHX2btub+F8U2+sklOCz/yq+cqoGU0lzAA7whWtxIT951Pal4ySQw:8s7tY+GU2JCh+4G/lzzM4txkRMw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e592235d9285da45dbca563eb48fc60d_JaffaCakes118
Files
-
e592235d9285da45dbca563eb48fc60d_JaffaCakes118.exe windows:4 windows x86 arch:x86
d3ac5d6a7ee833d55f3bdf75bae4b975
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysAllocStringByteLen
SysFreeString
kernel32
ResetEvent
LCMapStringA
SetEndOfFile
TerminateThread
GetCurrentDirectoryA
LoadLibraryExA
SetEnvironmentVariableA
HeapReAlloc
GetSystemInfo
VirtualProtect
CompareStringW
WriteFile
GetFileType
CreateFileA
CreateEventA
MapViewOfFile
GetComputerNameA
WideCharToMultiByte
RaiseException
SetHandleCount
TlsSetValue
IsBadCodePtr
GetExitCodeThread
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
CreateThread
FileTimeToSystemTime
CompareFileTime
CreateMutexA
TlsFree
SetLastError
LocalFileTimeToFileTime
DeleteCriticalSection
ReadFile
OpenMutexA
CloseHandle
SetFilePointer
GetLocalTime
ResumeThread
FlushFileBuffers
VirtualQuery
RtlUnwind
CompareStringA
SystemTimeToFileTime
SetUnhandledExceptionFilter
CreateFileMappingA
HeapDestroy
TlsGetValue
GetSystemTimeAsFileTime
ReleaseMutex
LCMapStringW
HeapFree
UnmapViewOfFile
GetACP
PulseEvent
WaitForSingleObject
ExitThread
GetTimeZoneInformation
WaitForMultipleObjects
HeapSize
LeaveCriticalSection
VirtualAlloc
SetStdHandle
GetModuleHandleA
GetCurrentThreadId
EnterCriticalSection
TlsAlloc
FreeLibrary
UnhandledExceptionFilter
GetStdHandle
GetCommandLineA
VirtualFree
HeapAlloc
SetErrorMode
VirtualAllocEx
ole32
CoInitializeEx
CoCreateInstance
CoUninitialize
advapi32
InitializeSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSidLengthRequired
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
GetSidSubAuthority
IsValidSecurityDescriptor
GetUserNameA
RegOpenKeyExA
InitializeAcl
user32
wsprintfA
cmutil
CmAtolA
CmLoadImageW
CmStrchrA
MakeBold
GetOSMajorVersion
CmLoadSmallIconW
CmLoadSmallIconA
printui
PrinterPropPageProvider
DocumentPropertiesWrap
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 328KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ