Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_a8ba0669644d4ef2418ced824694d13341cb867b1de46c04305c2a292038ad53.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_a8ba0669644d4ef2418ced824694d13341cb867b1de46c04305c2a292038ad53
-
Size
685.8MB
-
MD5
b108cee7ef1f098f3ffc6e81e81426d5
-
SHA1
d976f0c8e155414342c405408d1dc0f5e25da3af
-
SHA256
a8ba0669644d4ef2418ced824694d13341cb867b1de46c04305c2a292038ad53
-
SHA512
ecd4aac92d8f765a7306e0574dca4617ed891f7b8d636a6961c9145e0197de446b72beae372789956a7f2f426c10de7d20d76ab684e9bc48ce7f419a4753de49
-
SSDEEP
6144:zeUa6USVmhO4GhAOzOdgMrXOrDXIqpcUD4wS8TPh0Q2xLiMefuo/n/MeD8cFcg4W:zeUmSjhAerDXjX0I/fuM/Mqt42
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_a8ba0669644d4ef2418ced824694d13341cb867b1de46c04305c2a292038ad53
Files
-
JaffaCakes118_a8ba0669644d4ef2418ced824694d13341cb867b1de46c04305c2a292038ad53.exe windows:6 windows x86 arch:x86
26b89f4524f9c196f69146e5e61debfd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
VirtualFree
VirtualAlloc
lstrlenA
lstrcmpA
CloseHandle
HeapAlloc
WideCharToMultiByte
WaitForSingleObjectEx
Sleep
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
TerminateProcess
GetLastError
GetThreadTimes
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
RaiseException
RtlUnwind
GetModuleHandleExW
HeapReAlloc
ExitProcess
GetStdHandle
WriteFile
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
GetProcessHeap
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
ReadConsoleW
HeapSize
CreateFileW
WriteConsoleW
Sections
.text Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
rK9vMca Size: 295KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ