Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_619248e468966601def0437376ebd0478d059131495700138c806c7db1920ffd.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_619248e468966601def0437376ebd0478d059131495700138c806c7db1920ffd
-
Size
204KB
-
MD5
0c2753e23647b5a3ebb5023c3da936ec
-
SHA1
952867e7207d390a2467a54cae11ab0029f8ec7e
-
SHA256
619248e468966601def0437376ebd0478d059131495700138c806c7db1920ffd
-
SHA512
0081133a32f92e5fabcd993883c96fe21c64af7f5365a46943591bf15b9d7fa7796455993df7d14925167f7cdea1731b69f65b3092f1c6fd50442127d92fb6f1
-
SSDEEP
3072:sopj6gTxmzaCEH8nFb369t9EtpiU7FZEz57GEYd4ntfrOulzQh:zpjtUzy8nF8YN73Ez57Gz4VyWzQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_619248e468966601def0437376ebd0478d059131495700138c806c7db1920ffd
Files
-
JaffaCakes118_619248e468966601def0437376ebd0478d059131495700138c806c7db1920ffd.dll windows:5 windows x86 arch:x86
97de38df25bb86ed5773a338d673d7ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
TranslateMessage
RegisterDeviceNotificationA
advapi32
RegLoadAppKeyW
kernel32
CloseHandle
OutputDebugStringA
LoadLibraryA
GenerateConsoleCtrlEvent
IsBadStringPtrW
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 866B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 128KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ