Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_fd04a288c0f606e237e1be208bf353cc8e03ab555ec4b7b95ed05078e5261e8e.dll
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_fd04a288c0f606e237e1be208bf353cc8e03ab555ec4b7b95ed05078e5261e8e
-
Size
208KB
-
MD5
81cf3045d4dc73f035e9f4823449c875
-
SHA1
8b6c3acde3f9e441734421a3fbaa2bb27ecff2e0
-
SHA256
fd04a288c0f606e237e1be208bf353cc8e03ab555ec4b7b95ed05078e5261e8e
-
SHA512
fd8ec735e9883bb2af1a57c171df9a3b486547840ff62b8883cc8338f2facd50112ff61668465393cd291c5c3f906c8ede8b876c86cfd81e872f8e0ba082a2e9
-
SSDEEP
3072:f0DpemgVst0qciSU12Eu/CSWznEeNd2LcT65hQt8Cz9B0k6Xq:+pepU127CjzEexUQSq9BH6X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_fd04a288c0f606e237e1be208bf353cc8e03ab555ec4b7b95ed05078e5261e8e
Files
-
JaffaCakes118_fd04a288c0f606e237e1be208bf353cc8e03ab555ec4b7b95ed05078e5261e8e.dll windows:5 windows x86 arch:x86
e39e4bc2a01a977f85e5be2edea20c09
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
gdi32
OffsetClipRgn
kernel32
CloseHandle
LoadLibraryA
OutputDebugStringA
GetModuleHandleW
GetSystemDefaultUILanguage
GetPriorityClass
wintrust
CryptCATAdminCalcHashFromFileHandle
user32
GetMenuState
TranslateMessage
EnumDisplayDevicesW
DragDetect
advapi32
CloseEncryptedFileRaw
RegLoadAppKeyW
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ