Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_050b521b536ba6e1f628ee71bea4697a.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_050b521b536ba6e1f628ee71bea4697a
-
Size
196KB
-
MD5
050b521b536ba6e1f628ee71bea4697a
-
SHA1
da211089bb0334f49590cd971705bda717790bfe
-
SHA256
3ff38f79a7c966a4f67f9892a22bb46c1f814f04b1c2a70ddcdd1a8316ce543b
-
SHA512
ff3605a408548966dad9b9522fc0418b5d583d9e2589e8b1499101f7a1ce6f86f93a37874301132ffdef5b48bd70c851cc15834a2906a8c72d3b0e3d6d8182d1
-
SSDEEP
3072:Iwf0JXVvsbotwD/M1fg4kTuXMmLMf6nvlEh0P8s:IOudCQDOn8vlaI8s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_050b521b536ba6e1f628ee71bea4697a
Files
-
JaffaCakes118_050b521b536ba6e1f628ee71bea4697a.exe windows:4 windows x86 arch:x86
04b4ddfc7d49be0a82edd16a14b86d9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalReAlloc
CloseHandle
GlobalAlloc
GlobalLock
GlobalReAlloc
GlobalDeleteAtom
lstrcpyA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
FreeLibrary
GetProcessVersion
GlobalFindAtomA
lstrcmpA
GlobalFlags
GlobalFree
GlobalAddAtomA
GlobalHandle
GetCurrentProcess
SetFilePointer
FlushFileBuffers
GlobalUnlock
LocalAlloc
lstrcpynA
InterlockedDecrement
LocalFree
lstrlenA
GetProcAddress
LoadLibraryA
VirtualAlloc
IsBadWritePtr
HeapReAlloc
LCMapStringW
GetStringTypeW
GetStringTypeA
HeapAlloc
LCMapStringA
MultiByteToWideChar
HeapFree
WriteFile
RtlUnwind
HeapDestroy
VirtualFree
HeapCreate
TlsGetValue
GetLastError
TlsAlloc
SetLastError
GetFileType
TlsSetValue
GetCurrentThreadId
GetEnvironmentStringsW
GetStdHandle
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetModuleFileNameA
TerminateProcess
GetVersionExA
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
Sleep
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
HeapSize
RaiseException
SetStdHandle
user32
LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
GetClientRect
GetPropA
GetSysColor
MapWindowPoints
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
SendMessageA
MessageBoxA
EnableWindow
UnhookWindowsHookEx
LoadStringA
FindWindowExA
SetFocus
AdjustWindowRectEx
GetWindowLongA
GetDesktopWindow
GetWindow
GetClassNameA
PostMessageA
CallWindowProcA
RemovePropA
CopyRect
GetTopWindow
CreateWindowExA
GetClassLongA
GetMessageTime
SetPropA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
comctl32
ord17
gdi32
Escape
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
RectVisible
TextOutA
PtVisible
OffsetViewportOrgEx
ExtTextOutA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE