Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_81d8d81c999cb15f2705ef51c8d3381f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_81d8d81c999cb15f2705ef51c8d3381f.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_81d8d81c999cb15f2705ef51c8d3381f
-
Size
174KB
-
MD5
81d8d81c999cb15f2705ef51c8d3381f
-
SHA1
e8d2b638eef6932f97451cf08c64ceddf35ca9c2
-
SHA256
4d81f4e73f7694f509182f62b2635df8ef2e39d9e6a9bcb65c15b753ea62efcf
-
SHA512
2e151a6e48f33d455e4abe962a8fc94e2b84bdc09bbdf1cec3439133c7951dfa8f0c9bd8be73a0453f6484d1ca2cdeaf2ad1571768a64bea0135f2602d02875a
-
SSDEEP
3072:BHPaVdTJPkGxtyiGWvYIfbhdkPZjEgVFjChsILa1iFRYBeJw9uOcW2MtuJMIi:JPaVxxEiGWgkbhdwugqQaRY+JW5oZi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_81d8d81c999cb15f2705ef51c8d3381f
Files
-
JaffaCakes118_81d8d81c999cb15f2705ef51c8d3381f.exe windows:4 windows x86 arch:x86
b3fc6d6dbd71b14c78b2022f0f30184c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW
rpcrt4
UuidCreate
user32
GetClassLongA
MessageBoxW
kernel32
ExitProcess
LeaveCriticalSection
GetConsoleOutputCP
GetThreadPriority
GlobalAlloc
WriteFile
SetEndOfFile
GetProcessHeap
GetVersionExA
CloseHandle
IsValidCodePage
IsValidLocale
CreateFileA
HeapFree
GetCommandLineA
InterlockedDecrement
SetUnhandledExceptionFilter
PurgeComm
GetCPInfo
TerminateProcess
GetProcAddress
UnhandledExceptionFilter
EnumResourceNamesA
EnterCriticalSection
GetModuleHandleA
IsDebuggerPresent
RaiseException
HeapAlloc
GetModuleFileNameW
GetCurrentThreadId
LCMapStringA
GetUserDefaultLCID
InterlockedIncrement
ReadFile
WriteConsoleA
GetLocaleInfoW
WriteConsoleW
ExitProcess
GetCurrentProcess
WideCharToMultiByte
GetCurrentDirectoryW
GetFullPathNameW
EnumSystemLocalesA
RtlUnwind
HeapReAlloc
Sleep
LCMapStringW
DeleteCriticalSection
InitializeCriticalSection
HeapSize
GetLastError
SetStdHandle
MultiByteToWideChar
GetFullPathNameA
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
Sections
.text Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ