Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_27d1639875727974db376290fd391d54.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_27d1639875727974db376290fd391d54
-
Size
179KB
-
MD5
27d1639875727974db376290fd391d54
-
SHA1
45c0a5f21abbaa6c0dce67816fdab9bcf4fd693d
-
SHA256
1b974a29763600ad330e8afa71cc3b00fa5e1b8a94ce02b4215b841f8c74df87
-
SHA512
a5580a527a6db51bd7d47f6abd6982061f0cd894ec1b1f153343dc2adea583930c06e6f4d87e39613ebae3376ea7dae09f2b78f306356691013ef530223a22af
-
SSDEEP
3072:u20pFVLHzjIDVZ1vvtFh1AgH+dXzglLnZPIm1wu6Ufk2JDHwDm1b3HsRZ:nYdHPa5R+gH+dE7PImBk2Nam1bWZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_27d1639875727974db376290fd391d54
Files
-
JaffaCakes118_27d1639875727974db376290fd391d54.exe windows:4 windows x86 arch:x86
7d3f3cf145f5cd49ac13687857cfc81e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BaseInitAppcompatCacheSupport
GetProcAddress
lstrlenA
lstrlenW
GetModuleFileNameA
WideCharToMultiByte
GetSystemInfo
IsBadReadPtr
EnumResourceTypesA
CreateProcessA
Sleep
CreateMailslotA
GetSystemDirectoryA
GetModuleHandleA
CloseHandle
GetDiskFreeSpaceA
MultiByteToWideChar
lstrcpyA
MoveFileExA
gdi32
GetStockObject
oleacc
AccessibleChildren
CreateStdAccessibleProxyA
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ