Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6886e758ce5d6de1923f7fdbf588f569.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6886e758ce5d6de1923f7fdbf588f569.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6886e758ce5d6de1923f7fdbf588f569
-
Size
115KB
-
MD5
6886e758ce5d6de1923f7fdbf588f569
-
SHA1
561520cfe6c346595d4fd3012483138b2067c391
-
SHA256
3f0b844ded61a2d75b20fd249b31e8e60f764d6a1be695fd37ae6f7d147b135c
-
SHA512
cd48482e0d8e3421febae96c9626a7f65bf0d5729ca9ce2de07fde3b8e34b7c95e00829d0d8b163c443ba0f49a85cd9a176a6e1d1f60eb5e0786a52460be824e
-
SSDEEP
3072:ejUDPDdpdiVDoX8HBh9nMRntLZ8kChSJTORoF6:uV88h9nMRr8kChSJT8k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6886e758ce5d6de1923f7fdbf588f569
Files
-
JaffaCakes118_6886e758ce5d6de1923f7fdbf588f569.exe windows:4 windows x86 arch:x86
e0967286cef7e14bcc73192bfc32c510
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
ReadFile
lstrcpyW
GetLastError
IsValidLocale
ReleaseMutex
SetPriorityClass
HeapCreate
GetModuleHandleA
IsBadStringPtrA
WriteConsoleW
GetFileSize
FindResourceA
WriteConsoleW
lstrlenW
IsBadCodePtr
GetFileTime
GetFileAttributesA
WriteConsoleW
CloseHandle
GetCurrentDirectoryA
msftedit
RichListBoxWndProc
SetCustomTextOutHandlerEx
RichEditWndProc
RichComboBoxWndProc
shell32
ShellMessageBoxW
ShellAboutA
ShellMessageBoxW
FreeIconList
ExtractIconW
DuplicateIcon
SHGetFolderPathA
SHGetMalloc
DragQueryFileA
SHGetFileInfoA
DragAcceptFiles
ShellAboutA
StrChrA
msasn1
ASN1BERDecEoid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE