Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
f71260bb0c8161d6babde2577be71f82_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
f71260bb0c8161d6babde2577be71f82_JaffaCakes118
-
Size
392KB
-
MD5
f71260bb0c8161d6babde2577be71f82
-
SHA1
5da112b211697e2a049af1ae971683901f84d695
-
SHA256
15495beba0c0bf9ba2f650280b73534403820fe17a2680147f3202c44fa93a9b
-
SHA512
64ce00403b80f13f23d6a19b3b56f31d17217d98c645b1c253b9195498b5a950c9783c64f604ad8d786f831ffc08db80be95cb163af0c96c9faa8ebba4aa5791
-
SSDEEP
12288:jdpOsih6jZmE7nuCvXroHY47cpO8fy2lt8Whtc2azd:zWhzgfPk44Y1yct7wd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f71260bb0c8161d6babde2577be71f82_JaffaCakes118
Files
-
f71260bb0c8161d6babde2577be71f82_JaffaCakes118.exe windows:4 windows x86 arch:x86
ed0270f5e9ea89be3d6255c3d261e017
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
LCMapStringA
ExitProcess
LoadLibraryA
CreateFileA
user32
CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
advapi32
RegEnumKeyA
RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegDeleteValueA
RegQueryValueA
RegSetValueA
RegCreateKeyA
Sections
.text Size: 371KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ