Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_96de1a206d03939f07dbaccea2cb55a4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_96de1a206d03939f07dbaccea2cb55a4.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_96de1a206d03939f07dbaccea2cb55a4
-
Size
108KB
-
MD5
96de1a206d03939f07dbaccea2cb55a4
-
SHA1
2f8a81d9b71ea74934e8a6f33fa59bf13996459f
-
SHA256
6eb55a0db3d27d458dce6aa1be28e5393fe68073124ce956b5236d7266a68433
-
SHA512
394e3cbae318f809294454be2640a78b45870a3b284c465cdcbd11d0e19112849227934630948f46af60e34bbabd8c7fb457648149cad321677f3011c841061c
-
SSDEEP
1536:cSoldSjlNx/vX2CSfC+9hA6wwu9fnx6BbAiJUAuKUgutbK6CEdbjYVl4NGs:BolLq+ww8ocKZutfkVl4ss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_96de1a206d03939f07dbaccea2cb55a4
Files
-
JaffaCakes118_96de1a206d03939f07dbaccea2cb55a4.exe windows:4 windows x86 arch:x86
5e87401f1b22e0b0a32b19199394ad19
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
CloseHandle
WriteFile
CreateFileA
GetModuleHandleA
lstrcmpiA
GetProcAddress
LoadLibraryA
lstrlenW
GetSystemPowerStatus
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetEnvironmentVariableA
GetOEMCP
GetACP
ExpandEnvironmentStringsA
FindResourceA
FlushViewOfFile
WideCharToMultiByte
LoadResource
HeapAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
GetLastError
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
RaiseException
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
user32
LoadImageA
SetCursorPos
FindWindowA
GetScrollPos
GetClientRect
DefWindowProcA
GetDC
ReleaseDC
gdi32
GetDeviceCaps
DeleteObject
advapi32
GetUserNameA
Sections
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ