Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6a8536216035e4b8ab5a6270cbb07a8f.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6a8536216035e4b8ab5a6270cbb07a8f.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6a8536216035e4b8ab5a6270cbb07a8f
-
Size
152KB
-
MD5
6a8536216035e4b8ab5a6270cbb07a8f
-
SHA1
28bde68516725f553d39372de75cb047503e23a0
-
SHA256
aad641cc5e653ce3804ad02a44de8cfa12f8cdb92d318a09c3cc03cfa666c360
-
SHA512
8c6ae0b4c5173ceddfd9a7d27aea46c7a0ccdcc8ce3c3ae1d77cfd1f793ba6101a8ee00a4ef0c41f00b903b4db0c14d1e7acc618eac631a837d4a52b0d226d6c
-
SSDEEP
3072:1IgId77xGL0ngrMFcqgQlODYbCP6rOjcgmNx11jf4DFt3QWVDaSNdHO:1bw08lOEbDRb1FfgtAvn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6a8536216035e4b8ab5a6270cbb07a8f
Files
-
JaffaCakes118_6a8536216035e4b8ab5a6270cbb07a8f.exe windows:4 windows x86 arch:x86
037c58effa0dde56583f033194f449d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHFileOperationW
SHGetFolderPathW
ShellExecuteW
CommandLineToArgvW
ShellExecuteExW
comctl32
PropertySheetW
kernel32
WriteConsoleInputVDMA
GetFullPathNameW
GetProcessHandleCount
GetShortPathNameW
EnumResourceNamesA
FreeEnvironmentStringsW
CompareFileTime
MoveFileW
SearchPathW
SetFileTime
shlwapi
SHGetValueW
PathRemoveFileSpecW
PathCombineW
PathAppendW
PathFileExistsW
user32
ReleaseDC
PostMessageW
GetWindowModuleFileNameW
SetWindowLongW
GetDlgCtrlID
LoadIconW
CreateCursor
IsWindow
IsDlgButtonChecked
GetDC
GetFocus
DestroyWindow
SetWindowTextW
PostQuitMessage
MsgWaitForMultipleObjects
oleacc
LresultFromObject
CreateStdAccessibleObject
ole32
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitializeEx
CreateStreamOnHGlobal
CoInitialize
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ