Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5a290a44d7c6f13c4b8621fd4f004600.exe
Resource
win7-20240708-en
General
-
Target
JaffaCakes118_5a290a44d7c6f13c4b8621fd4f004600
-
Size
423KB
-
MD5
5a290a44d7c6f13c4b8621fd4f004600
-
SHA1
68a1bf8718ee967c3f9d81f6e1bad0a1700dfe93
-
SHA256
c2e42a11ed043f3f90c531612dc4fe5fbd170f0e4152d4fcf278a3c841a69fde
-
SHA512
640e3405c3c65e23c3921cac7fe6b7f75ece9126d0d13b6279e02bb64fe8f8e4454273c41488ae0e6926bd352b0c8b37f02eb44439568c2dc6d863fe5af920dc
-
SSDEEP
12288:4bK1qiqvX6xlYwT76cdOfLsqTfrnmcfISVLrE:z13lxyS6uOTsq+j2f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5a290a44d7c6f13c4b8621fd4f004600
Files
-
JaffaCakes118_5a290a44d7c6f13c4b8621fd4f004600.exe windows:4 windows x86 arch:x86
c2f6f83f92fa54d9e84f748850928c4a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemAlloc
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIconA
Sections
CODE Size: 394KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
B:^�u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE