Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6139c810fb03937bdeb1c9752d6dcc50.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_6139c810fb03937bdeb1c9752d6dcc50
-
Size
170KB
-
MD5
6139c810fb03937bdeb1c9752d6dcc50
-
SHA1
09de03b6fdb490cd301d0d50b5fa348502248dc3
-
SHA256
6a74799336f84e3aaa53ac68713f7e92c0ea5bd6e69fc80374cfe53edd34d070
-
SHA512
6b70407073a23a4a142be9537add145e7cadd5ed4b5c5eda76b52dcb77a287adf9e571f64df0e26c019cb71f1a338a5ab1368c41d004cf97aada8e847c9e4e46
-
SSDEEP
3072:y5pg4bWpSZxGfq/trlhvO5i8DRVXTBVkMe4Bi4tBEo:qprbW0DGiFEPDDkx4w4jE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6139c810fb03937bdeb1c9752d6dcc50
Files
-
JaffaCakes118_6139c810fb03937bdeb1c9752d6dcc50.exe windows:4 windows x86 arch:x86
e836bb975b14e4ac4d6e3d4eebacfb28
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
FormatMessageA
SetFileAttributesA
CreateProcessA
GetEnvironmentVariableA
GetShortPathNameA
RemoveDirectoryA
MoveFileA
GetVolumeInformationA
QueryPerformanceCounter
GetSystemTime
GetLocalTime
CreateFileW
GetModuleHandleA
MoveFileExA
GetDateFormatA
FreeResource
FindResourceA
SetSystemPowerState
FreeLibrary
LoadLibraryW
ExitProcess
GetCurrentProcessId
GetFileTime
GetModuleFileNameW
MultiByteToWideChar
CopyFileW
CreateDirectoryA
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualProtect
VirtualAlloc
GetCurrentThreadId
GetModuleHandleW
GetCommandLineW
GetProfileStringW
GetSystemTimeAsFileTime
LockResource
GetStartupInfoA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
GetSystemInfo
LCMapStringA
GetTickCount
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCommandLineA
GetVersionExA
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
advapi32
OpenSCManagerW
RegOpenKeyExW
ole32
OleInitialize
OleCreate
StgCreateDocfile
CoSuspendClassObjects
CoUninitialize
OleUninitialize
CoInitialize
wininet
InternetConnectA
InternetOpenA
HttpOpenRequestA
HttpSendRequestA
InternetWriteFile
HttpEndRequestA
InternetCloseHandle
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 68KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vdemtff Size: - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE