CcfZASHbgfDsbf
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_feff88074e05bdde268cd96478e86a321728bf2b9810cc3d9de132562ee7fc37.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_feff88074e05bdde268cd96478e86a321728bf2b9810cc3d9de132562ee7fc37
-
Size
184KB
-
MD5
3f4f947a7bb4bf32ea01998240334aab
-
SHA1
cd696270b20c39aa9e65ff71fec9c7128bd52514
-
SHA256
feff88074e05bdde268cd96478e86a321728bf2b9810cc3d9de132562ee7fc37
-
SHA512
c6e254eda3db4bf8442403b70cd522abab8b7537701a05ce186560194271e3194d34cc21c00195fd759d5a021d966b4536dbc6f225e8a47ee145916e3d0ac98d
-
SSDEEP
3072:LJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JTa//2uFrSc:QfYOX+wTScR/Xzku9LVw8uG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_feff88074e05bdde268cd96478e86a321728bf2b9810cc3d9de132562ee7fc37
Files
-
JaffaCakes118_feff88074e05bdde268cd96478e86a321728bf2b9810cc3d9de132562ee7fc37.dll windows:5 windows x86 arch:x86
1691313ae64e22216ac678d4d81d8bb7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryExA
GetModuleHandleW
GetModuleFileNameA
oleaut32
VarBstrFromDec
advapi32
RegLoadAppKeyA
RegisterEventSourceW
msvcrt
memset
user32
ShowOwnedPopups
gdi32
GetFontData
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ