Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6bfa1517b3e005c6ca4d6b8d31aedf20.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6bfa1517b3e005c6ca4d6b8d31aedf20.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6bfa1517b3e005c6ca4d6b8d31aedf20
-
Size
128KB
-
MD5
6bfa1517b3e005c6ca4d6b8d31aedf20
-
SHA1
6ab5d4f147d10a4c494b696498d39f45fc99216d
-
SHA256
0ad42caf763e475672e9aba9fbd3eb3aa48c1f25b462c2a85c7c2a83da702563
-
SHA512
8139eddeffc94186ff2ba5ed418cb1ab420e75d629c91614b6b3c0ec1c0fbc885f1d7efe7c551c4a6b7c7f129edcb1126396f1cc4663bb6a264845ba8e90a34f
-
SSDEEP
3072:9LHbwrgir/6vpvEcPiaUSqc4Y0HbBZDCR99uh:K/mPPiaUDcybKRP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6bfa1517b3e005c6ca4d6b8d31aedf20
Files
-
JaffaCakes118_6bfa1517b3e005c6ca4d6b8d31aedf20.exe windows:5 windows x86 arch:x86
fdef7782635d83637fcbecce8c2aa569
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetCurrentProcess
LocalLock
TlsGetValue
HeapFree
GetFileAttributesA
GetTickCount
GetStringTypeA
SetLastError
CreateDirectoryW
FindClose
FindResourceW
GetLocaleInfoW
VirtualProtect
GetExitCodeThread
RemoveDirectoryW
IsBadWritePtr
MapViewOfFile
IsValidCodePage
GetDriveTypeW
GetFileAttributesA
user32
PeekMessageW
SetFocus
LoadImageW
GetWindowLongW
IsWindow
wsprintfW
LoadStringW
SetCursor
IsDialogMessageA
GetWindowTextW
PostMessageW
LoadCursorA
DispatchMessageA
msctf
TF_InitSystem
DllUnregisterServer
DllUnregisterServer
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE