Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7cc686e1da3a8650ff80546068208eb8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7cc686e1da3a8650ff80546068208eb8.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_7cc686e1da3a8650ff80546068208eb8
-
Size
252KB
-
MD5
7cc686e1da3a8650ff80546068208eb8
-
SHA1
eabdb43e5b24daef481bafeb0731a34c4ac96a68
-
SHA256
20d82d12cd3a3561a07ac91b703e1c3d55785d97960d0bb42e3d70992d444787
-
SHA512
071819bdce5d43f226cd7aadf25810209362e2d11955480ec785c56c7fdc1d027cddbe8a2782f155fa31a39347786020843e9a0fe72f63a5d4ee00e839db7d97
-
SSDEEP
6144:jId079u0236C/DkLqMAo74a3l/wOjjf0jF1zLYpH/XRe:kEALkuMAojYO30jFOpH/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7cc686e1da3a8650ff80546068208eb8
Files
-
JaffaCakes118_7cc686e1da3a8650ff80546068208eb8.exe windows:4 windows x86 arch:x86
8e4ffada0d4bb5946be829009347cc79
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
lstrcpynA
lstrlenA
GetLastError
GetFullPathNameA
GetFileAttributesA
lstrcpynW
lstrlenW
GetFileAttributesW
FreeLibrary
MultiByteToWideChar
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
Sleep
LocalFree
GetTickCount
GetModuleFileNameW
GetVersionExW
LocalAlloc
LoadLibraryW
GetLocalTime
GetProcAddress
LoadLibraryA
user32
EnableWindow
SetForegroundWindow
SendMessageW
GetMenuState
ShowCaret
CreateAcceleratorTableW
SetTimer
GetMenuItemID
GetMenuInfo
PostMessageW
GetCapture
CreateDesktopA
GetSubMenu
wsprintfA
CreateDialogIndirectParamW
LoadMenuW
AppendMenuA
CharPrevA
SetWindowTextW
SetDlgItemInt
TrackPopupMenuEx
GetForegroundWindow
GetSysColor
TrackPopupMenu
IsWindow
LoadIconA
wsprintfW
GetDlgItemTextA
GetMessageW
DialogBoxParamA
AdjustWindowRect
GetCursorPos
CopyIcon
MonitorFromPoint
CreateDialogParamA
GetKeyState
SetCursor
CharNextA
SetDlgItemTextW
GetDCEx
advapi32
RegCreateKeyExW
RegEnumKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteKeyA
shell32
SHGetDesktopFolder
security
SealMessage
CompleteAuthToken
gdi32
CreatePolygonRgn
CreateScalableFontResourceW
StretchDIBits
GetTextExtentPointA
SelectBrushLocal
CreateFontIndirectExA
AddFontResourceW
Sections
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xSHu Size: 2KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xCaD Size: 104KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.G Size: 4KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oBZ Size: 5KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Pi Size: 105KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ