Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
f8791cd1534ff1bdee355b251eb14761_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f8791cd1534ff1bdee355b251eb14761_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
f8791cd1534ff1bdee355b251eb14761_JaffaCakes118
-
Size
278KB
-
MD5
f8791cd1534ff1bdee355b251eb14761
-
SHA1
1e8b28ef99fe1867b84b5e415c639405f8422339
-
SHA256
5b21f602ef96da6394a1731f5c93267a86f86f3b0b6bf95e59f8ce6ea500297d
-
SHA512
9cbb00a854da863aa3cbbe9f818360ad89da13d978ef9ecf637ce7293e1b0dbd69dd35f2bfff1c0caa3d0a120003b635ae6e4543bff72c6e2fd91f9ffa71fe93
-
SSDEEP
6144:426dfYFuJqqNqo8E6i4kxnYAXfqXLwEHbYoSckT4Au6ZGR/fm7QEU:jgDYqL2kxnYAUvxk0Au6c+K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8791cd1534ff1bdee355b251eb14761_JaffaCakes118
Files
-
f8791cd1534ff1bdee355b251eb14761_JaffaCakes118.exe windows:4 windows x86 arch:x86
d79fadab51af9021ac35903d651af748
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetLocalTime
GetCurrentProcess
DeviceIoControl
GetModuleFileNameA
GlobalAddAtomW
HeapFree
GetTickCount
GetStdHandle
GlobalMemoryStatus
GetSystemTimeAsFileTime
GetVersion
SetUnhandledExceptionFilter
QueryPerformanceCounter
TlsAlloc
SetLastError
HeapAlloc
GetVersionExA
TlsSetValue
GetCurrentThread
EnumResourceNamesA
RaiseException
CloseHandle
GetCommandLineA
TerminateProcess
GetModuleHandleW
SetHandleCount
OutputDebugStringW
GetStartupInfoA
GetFileType
RtlUnwind
TlsGetValue
GetComputerNameA
GetCurrentProcessId
GetDiskFreeSpaceA
TlsFree
InterlockedExchange
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
gdi32
MoveToEx
GetGraphicsMode
PolyBezierTo
EndPath
FillPath
SetROP2
BeginPath
GetStockObject
SetBrushOrgEx
GetWorldTransform
CreatePatternBrush
GetClipBox
SetGraphicsMode
PolylineTo
Rectangle
IntersectClipRect
CloseFigure
SelectClipPath
LineTo
PolyDraw
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ