Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7c981c04bba0c25311f3b068b5de8957.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_7c981c04bba0c25311f3b068b5de8957
-
Size
185KB
-
MD5
7c981c04bba0c25311f3b068b5de8957
-
SHA1
b69217838fb48dbf43a89e3b02b4f46ba7dca0d2
-
SHA256
18c9bddd29d170371f5658fcc4a848f457c417983038d48ff391cb09a33f65ff
-
SHA512
448f8e51948028964ac0603452d2181d54ce396d075bbdc32ab74ae196e774dc8d4c36315639d423b14e63223977d6f351b5eb5a4e55a99916425c6f649e8a44
-
SSDEEP
3072:CFkGPUL3oIEbXDuGtIXZ6OPKQmLo7xw87sXAICyEVHd+u8htw:hKULYIE3u8IXZ663mEW8ByWRn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7c981c04bba0c25311f3b068b5de8957
Files
-
JaffaCakes118_7c981c04bba0c25311f3b068b5de8957.exe windows:4 windows x86 arch:x86
e2f33b5e677fcd59ef6b8e62d5a33409
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathW
setupapi
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
iphlpapi
GetIpAddrTable
newdev
UpdateDriverForPlugAndPlayDevicesW
user32
IsWindow
EnumChildWindows
CreateWindowExW
DestroyWindow
SendMessageA
GetDlgItem
GetWindowThreadProcessId
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
kernel32
AddAtomA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetStartupInfoA
GetOEMCP
WriteFile
UnhandledExceptionFilter
EnumResourceLanguagesA
FreeEnvironmentStringsA
GetNumberFormatA
GetEnvironmentStringsW
GetCPInfo
SetUnhandledExceptionFilter
Sections
.text Size: 97KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ