Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_40dfbf71e2a035f0531d226eec0defba.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_40dfbf71e2a035f0531d226eec0defba
-
Size
273KB
-
MD5
40dfbf71e2a035f0531d226eec0defba
-
SHA1
d90a4d886680b5770cd05c24c70f2e7b4787a01b
-
SHA256
2b6343668a0cacd6b062b07296c02c1c3d6c728b90d610ba65bbc795fcbf04c2
-
SHA512
bbe351ec5311fc5cdaac79084f7604a73bce472e448ac7cf71f1c45e5ee9a75eb268661ad778eb7de85c82ec44c860c031ad28ef9832219aac143fd6e5757de7
-
SSDEEP
6144:sYwBgQixJ/pjzJin0y3ldfi91W3JxP+0znAklBkL7iT:fwB+J/tzJi0idqC3Fzmq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_40dfbf71e2a035f0531d226eec0defba
Files
-
JaffaCakes118_40dfbf71e2a035f0531d226eec0defba.exe windows:4 windows x86 arch:x86
bed8ed49a5c70cb59c030b8ef75584fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
Sleep
GetAtomNameA
GetPrivateProfileIntW
GetModuleHandleW
GetPrivateProfileStringW
GlobalSize
MultiByteToWideChar
LoadLibraryW
MulDiv
GetTickCount
GetVersionExA
EnumResourceTypesW
FindFirstFileW
FreeLibrary
LoadResource
DeleteCriticalSection
WritePrivateProfileStringW
lstrlenW
GetProcAddress
LoadLibraryA
GetSystemDirectoryW
LockResource
GetModuleFileNameW
GetVersionExW
InitializeCriticalSection
GetLocaleInfoW
oleacc
LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW
newdev
UpdateDriverForPlugAndPlayDevicesW
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ