Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
fa67ed688fb058171ae8c1bc2e6e0b64_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa67ed688fb058171ae8c1bc2e6e0b64_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
fa67ed688fb058171ae8c1bc2e6e0b64_JaffaCakes118
-
Size
206KB
-
MD5
fa67ed688fb058171ae8c1bc2e6e0b64
-
SHA1
d25b5cdefa52d3d0a8fa19c0abbba648cd867c9e
-
SHA256
48c0e353f879efd36fe9d8bea73bacb3a139cbfd78a9f470dc19cf054ed8b640
-
SHA512
6acba612e5fbe1cdfd712eb620cbfd97ef677aa13c672add686748f98b8669aa1ca38495937e5d7d6b37bf1313341a542e3f21935cdd86764574d2713248917f
-
SSDEEP
3072:IZKoxQb+k9QvlM2UomDQEGPjRHfNtPYuD/V9P8rMz8csf2jacKUSI7Lj/PKbcVGX:2rox9QUkEq9/nP3D/jP8Pcu65GbNwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa67ed688fb058171ae8c1bc2e6e0b64_JaffaCakes118
Files
-
fa67ed688fb058171ae8c1bc2e6e0b64_JaffaCakes118.exe windows:4 windows x86 arch:x86
23f02a6162613533409b236d2e0bdf40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetModuleHandleA
GetSystemDirectoryW
MulDiv
CreateMutexW
FindAtomW
EnumDateFormatsW
FindResourceA
CreateSemaphoreW
GetNamedPipeInfo
RaiseException
FreeResource
ConnectNamedPipe
GlobalGetAtomNameW
InitializeCriticalSection
WaitForSingleObject
GetPriorityClass
MoveFileA
SetErrorMode
GetNumberFormatA
GetLocalTime
GetTempPathA
lstrcat
GlobalDeleteAtom
SetLocaleInfoA
EnumCalendarInfoA
WinExec
lstrcpy
GetUserDefaultLCID
SetLocaleInfoW
IsBadStringPtrA
AddAtomW
GlobalGetAtomNameA
GetDateFormatW
GetMailslotInfo
AddAtomA
SetCurrentDirectoryA
RemoveDirectoryW
SetComputerNameW
GetVersionExA
CreateNamedPipeA
GetProcAddress
lstrcmpW
ReplaceFileW
Beep
SetCalendarInfoW
SystemTimeToFileTime
ReplaceFileA
IsBadWritePtr
user32
wvsprintfW
EmptyClipboard
GetDC
MonitorFromPoint
CreatePopupMenu
WinHelpA
GetWindowLongW
GetMenuItemID
CharUpperA
SetParent
RegisterClassExW
CreateCaret
FindWindowA
UpdateWindow
DrawIcon
GetKeyState
SetWindowPos
ShowCursor
GetClassInfoW
GetActiveWindow
RegisterWindowMessageW
OffsetRect
EnableWindow
GetForegroundWindow
GetMenuItemInfoW
DefFrameProcW
LoadMenuW
gdi32
EnumMetaFile
CreateBitmap
DeleteMetaFile
SetDIBColorTable
GetAspectRatioFilterEx
SetWindowExtEx
ExtTextOutW
SetTextColor
GetClipBox
CreateEnhMetaFileW
EndPath
CreateDIBitmap
GetTextExtentPointA
advapi32
RegFlushKey
RegOpenKeyExW
RegOpenKeyExW
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
version
VerFindFileA
VerLanguageNameW
winmm
mciDriverNotify
midiInGetDevCapsA
timeGetTime
midiOutCachePatches
midiOutReset
Sections
.ZkOK Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.A Size: 2KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Lg Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.c Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Bbrdqv Size: 4KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ