Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_543c69c8719714aaaabe73bfcfcc9f93.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_543c69c8719714aaaabe73bfcfcc9f93.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_543c69c8719714aaaabe73bfcfcc9f93
-
Size
155KB
-
MD5
543c69c8719714aaaabe73bfcfcc9f93
-
SHA1
8d663018594c4a788dfabc495bc10cc145cbbb7f
-
SHA256
4ef773d64bfc4484012cffc447ea5775cc56bdaac1094c8300b4c4ccb987ba3b
-
SHA512
3f726b5e2032c48718e71b8c54e26a600f63986251f3a6a2778d0c586d778a9dbfa84cb10edbf004139a85e3f7a340566d38b2a9fb3931f7d396776b03e17fe3
-
SSDEEP
3072:mGB/ZOiLbhgDA+m/kDy4te21Yc50wyKdKaeYoPn9y00pKeJyf7:m0hZLb67m7WR1Yc+oK5lncK2yT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_543c69c8719714aaaabe73bfcfcc9f93
Files
-
JaffaCakes118_543c69c8719714aaaabe73bfcfcc9f93.exe windows:4 windows x86 arch:x86
2b4297044b5554630c4e1e81217f4984
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
lstrcmpiW
lstrcpyA
FindClose
GlobalFree
GetProcessAffinityMask
GetTickCount
MultiByteToWideChar
LockResource
EnumResourceNamesW
GetLastError
lstrcpyA
GetACP
GetCPInfo
WideCharToMultiByte
lstrcpyW
FreeEnvironmentStringsW
lstrlenW
GlobalAlloc
OutputDebugStringW
InitializeCriticalSection
GetModuleHandleW
user32
wsprintfW
PostThreadMessageW
GetMessageW
SetTimer
CharNextW
CharUpperW
KillTimer
DispatchMessageW
GetDC
SendMessageA
TranslateMessage
UnregisterClassA
shlwapi
PathCombineW
PathFileExistsW
ole32
CoTaskMemRealloc
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoCreateInstance
CoRegisterClassObject
CoRevokeClassObject
StringFromCLSID
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ