Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_07ec8b6e8c148b2847a910f6b5c63c2d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_07ec8b6e8c148b2847a910f6b5c63c2d.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_07ec8b6e8c148b2847a910f6b5c63c2d
-
Size
288KB
-
MD5
07ec8b6e8c148b2847a910f6b5c63c2d
-
SHA1
7a2b2e33a88a8fc6b132de6bd833387438279824
-
SHA256
62dc18f7d85f9c5009ea692618f650c51859ec71c2e5116c1a791f076cdac8b6
-
SHA512
d1610d4a7d24302ee938bebb8ac5df0dbe0ecb0ebba0742cef3c97531438f157f26a28b24be40f448aa0da20472cf6981b20c053eca8112902ee372bae35d123
-
SSDEEP
3072:tmJ+bNK6/M9WdT55ojgkSluk3zKNTaaHw7Koj4rtzf9EpvOBdts58n1bdctEPAnE:t1b86k9MVkSENPUvodK8YtEP++UsZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_07ec8b6e8c148b2847a910f6b5c63c2d
Files
-
JaffaCakes118_07ec8b6e8c148b2847a910f6b5c63c2d.exe windows:65535 windows x86 arch:x86
447f3b0bc564ad1a9785566bb42017e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GlobalCompact
GetBinaryTypeW
VirtualProtect
GetProfileStringW
netapi32
NetUserGetInfo
NetWkstaSetInfo
NetApiBufferFree
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
OleUninitialize
setupapi
SetupCloseInfFile
SetupQueryFileLogA
SetupInitializeFileLogA
SetupCloseLog
SetupOpenLog
SetupRemoveFileLogEntryA
SetupGetFileCompressionInfoA
SetupGetInfFileListA
SetupScanFileQueueA
SetupInstallFilesFromInfSectionA
SetupOpenAppendInfFileA
SetupOpenFileQueue
SetupGetSourceFileLocationA
SetupGetSourceFileSizeA
Sections
.text Size: - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ