Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_76fcb30d7260e0d020d2af03bf909cf5.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_76fcb30d7260e0d020d2af03bf909cf5.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_76fcb30d7260e0d020d2af03bf909cf5
-
Size
283KB
-
MD5
76fcb30d7260e0d020d2af03bf909cf5
-
SHA1
c71a3e669206ebd8a36b4a6b50ad09641b12935a
-
SHA256
4c92ebec33521fca83ef89ae2caa5b707abe6ac000fa8a7c6e3ded3a1b550899
-
SHA512
86956182676ac62be8dee2f3595dd86cc81fdd15bf78805d404e61af64ea2357ea6f13905fb550298abf31e86c36bf9fe25c62bfbbb8e561857914af776a4835
-
SSDEEP
6144:uAzrN1e85qsb/sTWji/W7ZE09UhPg8HiGdkrlqWRW:uAzp1J5qE6si/hYUhPBHiGdvWA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_76fcb30d7260e0d020d2af03bf909cf5
Files
-
JaffaCakes118_76fcb30d7260e0d020d2af03bf909cf5.exe windows:4 windows x86 arch:x86
dd730cd90e69b8deee7fb164ec4faf53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetACP
IsValidLocale
GetFileType
WriteFile
SetLastError
CreateFileA
FlushFileBuffers
GetStdHandle
HeapAlloc
GetSystemTime
SetHandleCount
WideCharToMultiByte
GetCurrentThreadId
IsDebuggerPresent
HeapDestroy
RtlUnwind
WriteConsoleW
VirtualAlloc
RaiseException
LCMapStringW
FreeEnvironmentStringsW
SetStdHandle
GetConsoleMode
FileTimeToSystemTime
VirtualFree
SystemTimeToTzSpecificLocalTime
TlsFree
HeapReAlloc
GetConsoleCP
DeleteCriticalSection
TlsGetValue
FreeEnvironmentStringsA
SystemTimeToFileTime
HeapFree
GetOEMCP
GetUserDefaultLCID
HeapSize
SetUnhandledExceptionFilter
TlsSetValue
InitializeCriticalSectionAndSpinCount
LCMapStringA
ExpandEnvironmentStringsA
GetTimeFormatA
SetFilePointer
FreeLibrary
ReadFile
GetSystemTimeAsFileTime
WriteConsoleA
GetModuleHandleW
GetConsoleOutputCP
EnterCriticalSection
GetProcessHeap
GetSystemDirectoryA
LeaveCriticalSection
TlsAlloc
IsValidCodePage
CloseHandle
GetModuleHandleA
GetTempPathA
EnumSystemLocalesA
UnhandledExceptionFilter
SetEndOfFile
GetVersion
VirtualAllocEx
advapi32
RegCreateKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
ws2_32
WSCInstallProvider
WSCDeinstallProvider
WSCWriteProviderOrder
WSAStartup
WSACleanup
WSCEnumProtocols
WSCGetProviderPath
ole32
StringFromGUID2
rpcrt4
UuidCreate
ntprint
PSetupFreeMem
PSetupPreSelectDriver
PSetupDestroySelectedDriverInfo
tsbyuv
DriverProc
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 244KB - Virtual size: 8.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ