Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_861b58ac92718610c177f44d18c6a2d6.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_861b58ac92718610c177f44d18c6a2d6
-
Size
284KB
-
MD5
861b58ac92718610c177f44d18c6a2d6
-
SHA1
a2b83c976d9eae9ce692a20c02a46324ae1dc58d
-
SHA256
104debcaa328428ff321b474b144344af6af19495a3cfe5e9e9bd1921e2a8438
-
SHA512
7c2f53701425b0ce90a7dc3cb63f51e1436f934af6dc69401e3f1706a6048014effd207fc1fe57a4c8f2f11d41c59557d54ad33c084039267e3008afc5a9bbae
-
SSDEEP
6144:GSliSmk/UN/HNn/s9FPSSdEnAh0QgL91b5r10xUpBCySeK3kc:GeLmKoWZ5EnDL9q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_861b58ac92718610c177f44d18c6a2d6
Files
-
JaffaCakes118_861b58ac92718610c177f44d18c6a2d6.exe windows:4 windows x86 arch:x86
fe410ed404949e631a6f7bd58398eb2d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
GlobalGetAtomNameA
GetOEMCP
IsValidCodePage
GetACP
TlsSetValue
WriteConsoleA
RtlUnwind
HeapReAlloc
TlsAlloc
VirtualAlloc
EnumResourceNamesW
MultiByteToWideChar
SetFilePointer
WideCharToMultiByte
GetConsoleOutputCP
SetStdHandle
GetCPInfo
GetTimeFormatA
GetLocaleInfoA
HeapSize
GetDateFormatA
RaiseException
rpcrt4
RpcStringFreeA
user32
MessageBoxA
CharNextA
DispatchMessageW
DispatchMessageA
GetDesktopWindow
LoadStringA
PeekMessageA
wsprintfA
shell32
SHGetSpecialFolderLocation
DragAcceptFiles
SHAppBarMessage
SHGetPathFromIDListA
SHGetFileInfoA
SHBrowseForFolderA
ShellExecuteExA
Shell_NotifyIconA
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 149KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ