Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_96977cff64d6d4f4d9269f5d876ee8a1.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_96977cff64d6d4f4d9269f5d876ee8a1
-
Size
181KB
-
MD5
96977cff64d6d4f4d9269f5d876ee8a1
-
SHA1
a3342d71ae672c2a6b0e89a5d1ee959a0499f9e1
-
SHA256
1f82895292fd0f9becfb08bcf6ce3a09799a60d0a81f61160152d35798b2c2e7
-
SHA512
69a9938e7a6fd83f2e842298f377af077a0f6274bc248c11f96509aabf47659296353156cd33e0cf03ad52377d928ace442f25a84e639e15addae9462c983ab7
-
SSDEEP
3072:8YZ1KP0tYNpCv5GUS1z/IZ6+rNALY3bflCtGcKg0I57Inpm92yL5CeO:ectYNpW5GxrIZ6xuj7u7IpByty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_96977cff64d6d4f4d9269f5d876ee8a1
Files
-
JaffaCakes118_96977cff64d6d4f4d9269f5d876ee8a1.exe windows:4 windows x86 arch:x86
9616e4029adddf2f39b1278c0620aa74
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImageWidth
GdipDisposeImage
kernel32
FlushInstructionCache
ExitProcess
GetVersionExA
LoadLibraryW
ExitProcess
SetLocaleInfoW
LocalFree
LocalAlloc
GetModuleFileNameA
ole32
CoInitialize
CoUninitialize
CoFreeUnusedLibraries
StringFromGUID2
CoCreateInstance
rpcrt4
I_RpcFreeBuffer
UuidCreate
comctl32
ImageList_DragLeave
ImageList_DragMove
ImageList_DragEnter
msimg32
AlphaBlend
TransparentBlt
winmm
timeGetTime
user32
TrackPopupMenuEx
ClipCursor
CreatePopupMenu
RedrawWindow
FindWindowA
DestroyMenu
GetDesktopWindow
gdi32
SelectObject
CreateCompatibleDC
GetObjectType
CreatePen
LineTo
CreateDIBSection
BitBlt
StretchBlt
DeleteDC
SetStretchBltMode
CreateDCW
CreateBitmap
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ