Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_80763613f2ef1ea0aa0c6066a28998af.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_80763613f2ef1ea0aa0c6066a28998af.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_80763613f2ef1ea0aa0c6066a28998af
-
Size
163KB
-
MD5
80763613f2ef1ea0aa0c6066a28998af
-
SHA1
344d64593d47393bf5f009460181e8d3cef64c01
-
SHA256
4fbbee23970040460e28cd804df5bac7cf9f88bb1becf9b4c1790fa45974777e
-
SHA512
6a782e1626bb4cb89b23438a1d7fe2396b24055fec84988272311d7b31399be6e4a8a356f2fc2644f01b8651afec9b718a71fc3fa25836e6c42bc65e5db9440c
-
SSDEEP
3072:2FxGLemEfiXg+L+l0dxYFjt6aa4xvwQvM9geFvwnSPAvEpUQov:2FUpoipL+l0j+jAthQvM99FvwnoAvEyQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_80763613f2ef1ea0aa0c6066a28998af
Files
-
JaffaCakes118_80763613f2ef1ea0aa0c6066a28998af.exe windows:4 windows x86 arch:x86
431f0a5911a6d812e489f16144e58a0e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyA
GlobalAlloc
FindClose
GetACP
lstrcpyW
GetProcessAffinityMask
GetTickCount
GetLastError
EnumResourceNamesW
GetCPInfo
lstrcmpiW
lstrlenW
WideCharToMultiByte
OutputDebugStringW
InitializeCriticalSection
FreeEnvironmentStringsW
LockResource
lstrcpyA
GlobalFree
MultiByteToWideChar
GetModuleHandleW
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
CharNextW
CharUpperW
SendMessageA
TranslateMessage
KillTimer
SetTimer
DispatchMessageW
GetMessageW
PostThreadMessageW
wsprintfW
GetDC
UnregisterClassA
ole32
CoCreateInstance
CoTaskMemAlloc
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CoRevokeClassObject
CoInitialize
CoRegisterClassObject
StringFromCLSID
shlwapi
PathCombineW
PathFileExistsW
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ