Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5d1ff6bc1d91ba3392498f460c1c7fcf.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_5d1ff6bc1d91ba3392498f460c1c7fcf.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_5d1ff6bc1d91ba3392498f460c1c7fcf
-
Size
200KB
-
MD5
5d1ff6bc1d91ba3392498f460c1c7fcf
-
SHA1
fd90fba6567b3fb4d26f64b9a1a6cea18b4536ab
-
SHA256
aba1055025935c107bbeccab4ecf4639762d226822c6405f9aa7c654f5da29a7
-
SHA512
5d6ad4628c014e26999caef55f1cac040d8db75c0dbd9697c21331b4adf388c9e06f0c94cbdd940c73bd7a56489c77b271e1efe198458da6d653f2db54583378
-
SSDEEP
3072:NJYmiekCJT8j6WtlkIdbfK+wFscieq/3m/ydODvsCdVmu6mOHFn7vTvkqD:33kKTW609fK6c5439ODvNdVm7mOZvTn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5d1ff6bc1d91ba3392498f460c1c7fcf
Files
-
JaffaCakes118_5d1ff6bc1d91ba3392498f460c1c7fcf.exe windows:4 windows x86 arch:x86
f60abc11fdab1f01f09d562706aae1ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
GetUpdateRgn
GetWindowInfo
EndDialog
oleacc
LresultFromObject
kernel32
PrivCopyFileExW
CreateFileMappingA
GetProcessId
DeleteAtom
EnumResourceTypesA
ExitProcess
MapViewOfFile
AddAtomW
ProcessIdToSessionId
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ