Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_41f7f2200cf39489f99f82ef1ab727d7.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_41f7f2200cf39489f99f82ef1ab727d7
-
Size
166KB
-
MD5
41f7f2200cf39489f99f82ef1ab727d7
-
SHA1
c6af8c603910a3c6edd5600ff0d849c6d169cd23
-
SHA256
2c18b47588f93746be9eb64908defaef48fc3bee1cd06cf9b05c0887cc3d62c6
-
SHA512
68ae4c8c92800bfc8cd7eaf1801d9ea408f3932cdee4d909ddaeef2cdbfa7c9436e13d6b077a21eccaddb08fe453476f19fce79e11c6996e9434a1c1960e5ac7
-
SSDEEP
3072:Tqx0uMqX1Lkhk7CcjCcwikH2Z3YCx8gl7KFSAo1KUDRXiweGtGK7QmT:TqxgqX1LkhktfhkWAgpESAoKeRXiOR7T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_41f7f2200cf39489f99f82ef1ab727d7
Files
-
JaffaCakes118_41f7f2200cf39489f99f82ef1ab727d7.exe windows:4 windows x86 arch:x86
a68b4c5ac154a8298f8c63073cfcbe50
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
MulDiv
GlobalGetAtomNameA
GlobalAlloc
GetPrivateProfileStringW
GetCurrentDirectoryW
GlobalFree
LoadLibraryExW
GetTickCount
LoadLibraryW
FindFirstChangeNotificationW
lstrlenW
GlobalSize
GetModuleHandleW
WaitForSingleObject
FindClose
LoadResource
GlobalUnlock
FindFirstFileW
GetCurrentThreadId
FindCloseChangeNotification
lstrcmpW
lstrcpynW
ResumeThread
WideCharToMultiByte
GetFileAttributesW
InitializeCriticalSection
EnumResourceTypesA
GetVersion
GetVersionExW
FindNextChangeNotification
GetLocaleInfoW
FileTimeToLocalFileTime
GetPrivateProfileIntW
IsValidCodePage
SetFileAttributesW
LoadLibraryA
CloseHandle
FindResourceW
DeleteFileW
MultiByteToWideChar
WritePrivateProfileStringW
lstrcpyW
GetLastError
FreeLibrary
GlobalLock
GetVersionExA
FileTimeToSystemTime
Sleep
GetProcAddress
GetModuleFileNameW
InterlockedIncrement
DeleteCriticalSection
SetThreadPriority
shell32
SHIsFileAvailableOffline
ShellExecuteExA
ShellExecuteW
ShellExecuteExW
SHGetFileInfoA
SHGetFolderPathW
SHGetPathFromIDListA
SHFileOperationW
SHBrowseForFolderA
CommandLineToArgvW
Shell_NotifyIconA
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ