D:\work\obfuscator\cxx\output\Release\temp\build\Release\Updater.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_50cc4f48fe6030d635da684241460615.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_50cc4f48fe6030d635da684241460615
-
Size
1.3MB
-
MD5
50cc4f48fe6030d635da684241460615
-
SHA1
704589bc214fb39f206246f8db1db046dbe2b3ae
-
SHA256
4359cc0978b6fbd60437be4cdcbc78d0ff180083dc1e9161bf10ec7d972dd618
-
SHA512
658d424db25fb881c23304072461ee243f12c114500a03b20d4fb1d142d4f3502613164ffbcfbd0b95a237b3ec894c4bff7e6b6285d71436263ac0ebe7113f92
-
SSDEEP
24576:/8nI+Ou7x47vEowhVSuk4Dc3TBoxZr18+qTDM7HfOeEiMjYpX32SRuZWUe8j:knl47c/kqc3TBox55qTDi/O/12xRuZRt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_50cc4f48fe6030d635da684241460615
Files
-
JaffaCakes118_50cc4f48fe6030d635da684241460615.exe windows:5 windows x86 arch:x86
25919194c6815ad40298b8929371a30d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
DeleteFileA
LoadLibraryW
SizeofResource
LockResource
LoadResource
FindResourceExA
EnumResourceLanguagesA
EnumResourceNamesA
GetConsoleWindow
AddVectoredExceptionHandler
GetVersionExW
VirtualAllocEx
WriteProcessMemory
GetLastError
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetModuleHandleA
GetVersion
GetFileType
GetStdHandle
MultiByteToWideChar
GetTickCount
QueryPerformanceCounter
GlobalMemoryStatus
CloseHandle
FreeLibrary
GetVersionExA
FlushConsoleInputBuffer
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
ExitProcess
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapFree
HeapReAlloc
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
WideCharToMultiByte
LCMapStringW
GetCPInfo
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
ReadFile
SetFilePointer
SetHandleCount
InitializeCriticalSectionAndSpinCount
WriteFile
GetConsoleCP
GetLocaleInfoW
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
FlushFileBuffers
SetStdHandle
CreateFileW
HeapSize
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateFileA
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetProcessHeap
GetModuleHandleW
GetCurrentProcessId
GetCurrentProcess
HeapAlloc
user32
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
ShowWindow
MessageBoxA
advapi32
ReportEventA
DeregisterEventSource
RegisterEventSourceA
Sections
.text Size: 457KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 594KB - Virtual size: 593KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE