Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_61720966ae05ee0e01e995ebbaae12f0.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_61720966ae05ee0e01e995ebbaae12f0
-
Size
208KB
-
MD5
61720966ae05ee0e01e995ebbaae12f0
-
SHA1
e764c98844f99f07c454baf617f8d840f11dff41
-
SHA256
b0980ea9e4357cc0a6c7d35dfb75f8b735c69f909d1987e26a34a863466a0914
-
SHA512
db1adcdb96c7de8d1cb235e605b66ea1bcdba88da47e13796233c1fac131b895ff0ff386823635ede3fcf6d44b4638b8b1fd4a1928b482951745aeb8529e2833
-
SSDEEP
3072:U9Wtx0Tez0+REULT2urIlhEc7ltcv2+ojiPgUEPToUxKSe:UktxHOuT2u0qc70v2+out
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_61720966ae05ee0e01e995ebbaae12f0
Files
-
JaffaCakes118_61720966ae05ee0e01e995ebbaae12f0.exe windows:4 windows x86 arch:x86
dd5d0539603189ef570158bb7b9ac5bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetShortPathNameA
GetEnvironmentVariableA
RemoveDirectoryA
WaitForSingleObject
GetCurrentProcess
LoadLibraryA
HeapValidate
HeapCompact
HeapCreate
HeapFree
HeapAlloc
RemoveDirectoryW
FindFirstFileW
FindNextFileW
TlsSetValue
TlsAlloc
GetProfileStringW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
SetFilePointer
ReadFile
SetEndOfFile
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
CreateFileA
CloseHandle
GetLastError
WriteFile
RtlUnwind
VirtualFree
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
FlushFileBuffers
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
user32
MapWindowPoints
GetScrollRange
FrameRect
ClientToScreen
SetDlgItemInt
SetForegroundWindow
IsClipboardFormatAvailable
CheckRadioButton
OffsetRect
EndDialog
CloseClipboard
SendDlgItemMessageA
SetClipboardData
SetFocus
RegisterClassExA
GetFocus
TrackPopupMenu
AppendMenuA
GetClassInfoExA
CallWindowProcW
GetWindowLongA
GetCursorPos
InvalidateRect
PostMessageW
DestroyWindow
SendMessageA
ValidateRect
DestroyMenu
BeginPaint
EmptyClipboard
GetDlgItemInt
ws2_32
getservbyport
getprotobynumber
getpeername
getsockname
htons
socket
shutdown
WSAStartup
WSACleanup
gethostbyname
sendto
setsockopt
getservbyname
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 58KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE