Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_f8c801f32b822d210bbb788407ed29cf.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_f8c801f32b822d210bbb788407ed29cf
-
Size
180KB
-
MD5
f8c801f32b822d210bbb788407ed29cf
-
SHA1
bc6b2888442a55b42d4aadf563a7383cafe20de5
-
SHA256
adbd74fa44708c118685b0798bc9e27e0fd50d027a22bbf6328da02875cb18de
-
SHA512
e5b03e1638ab04fb014683848fd4f4fb417e371b6c182c07e7f9c9589f5c95f774e8d47ad2411c71f1b9027598f10fd4c405539ef1e026953f1a3e9c5612e72f
-
SSDEEP
3072:39p0m9FOGDv64TOvqdjR91E404PUW6bKHJZK0Bzb5Gea:39p0bG6q7040aBfK0db5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_f8c801f32b822d210bbb788407ed29cf
Files
-
JaffaCakes118_f8c801f32b822d210bbb788407ed29cf.dll windows:5 windows x86 arch:x86
badb3d94d7a44189a7eeb5528a733e61
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shell32
SHGetDesktopFolder
user32
ShowOwnedPopups
setupapi
SetupDiEnumDeviceInfo
iphlpapi
GetIfTable
advapi32
RegOverridePredefKey
kernel32
GetModuleFileNameW
LoadLibraryExA
oleaut32
VarR4FromI2
msvcrt
memset
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ