Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7aec16a8fb5f01f89e648e335ab38cd3.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_7aec16a8fb5f01f89e648e335ab38cd3
-
Size
165KB
-
MD5
7aec16a8fb5f01f89e648e335ab38cd3
-
SHA1
ecfbdcdff8e1536413e26ac257278fd31c522c1c
-
SHA256
1fbd2d21d2701a6b0404d9cc6a450820da3efaa28889b2978290ced398b63b82
-
SHA512
b3348027a8fad6a22a95a63bb30f1512bcea92f79777ca14205c24d9115641415f31358fc057bee22cd98a33c8b7a25db80440d05d27b6ab97d7be1327eb29a2
-
SSDEEP
3072:h5G2xOekJm/xV97W5OcP2kexGB+IQTca3ThqGAT5mekez5JvWXAn9F+lhw:XB7kJm/xr7W5Og+Y+QOh0w0zWXeSlhw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7aec16a8fb5f01f89e648e335ab38cd3
Files
-
JaffaCakes118_7aec16a8fb5f01f89e648e335ab38cd3.exe windows:4 windows x86 arch:x86
a037cdfb91cb567bb75f4eb4cb05f96d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
MulDiv
GlobalGetAtomNameA
lstrlenW
GetPrivateProfileStringW
Sleep
GetProcAddress
DeleteCriticalSection
LoadResource
GetModuleHandleW
LoadLibraryA
LockResource
GetVersionExA
GetPrivateProfileIntW
EnumResourceTypesW
GetVersionExW
WritePrivateProfileStringW
GlobalSize
FreeLibrary
InitializeCriticalSection
MultiByteToWideChar
IsDBCSLeadByteEx
LoadLibraryW
GetModuleFileNameW
FindFirstFileW
GetTickCount
GetLocaleInfoW
wininet
InternetCloseHandle
InternetOpenA
InternetErrorDlg
HttpQueryInfoA
InternetConnectA
InternetCrackUrlA
InternetTimeToSystemTime
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetTimeFromSystemTime
shell32
DllGetVersion
SHGetPathFromIDListA
SHGetFileInfoA
CommandLineToArgvW
ShellExecuteExW
SHBrowseForFolderA
SHGetFolderPathW
ShellExecuteExA
SHFileOperationW
ShellExecuteW
Shell_NotifyIconA
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ