Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_a030ef66f9ef28a688f2c8463748c762.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_a030ef66f9ef28a688f2c8463748c762.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_a030ef66f9ef28a688f2c8463748c762
-
Size
176KB
-
MD5
a030ef66f9ef28a688f2c8463748c762
-
SHA1
be5461ec3f54e4f386e8cdabb7d3c88e47bb3cc6
-
SHA256
4b95b03e48c5d1e488d157d9b4c6946ef094a83755518620081cc992f60677a4
-
SHA512
328258cf2431f9b338e33e0dde0327a44bc4cd9d16c7aceaa6a3a32671d9f08e45ebc0f68ab71b59136c6d148c6f0856e358258e8d99d787bc0c8b1af9c26caa
-
SSDEEP
3072:7wbqKYJUz2rp2YLb+tye2FZGZu9ZTA44AM3vf6h1kCZEtd2g4Psp2:7wbqKYyK1L/+7EZ9lRDM/ih2yE6gf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_a030ef66f9ef28a688f2c8463748c762
Files
-
JaffaCakes118_a030ef66f9ef28a688f2c8463748c762.exe windows:4 windows x86 arch:x86
9ec46400c5b81491f3f01618ebbee53e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
shell32
SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW
user32
GetClassLongA
MessageBoxW
kernel32
EnumSystemLocalesA
GetConsoleOutputCP
GetProcessHeap
GetUserDefaultLCID
GetThreadPriority
GetLastError
TerminateProcess
WriteFile
GetModuleFileNameW
WideCharToMultiByte
GetCurrentProcess
EnterCriticalSection
InterlockedIncrement
IsValidCodePage
SetStdHandle
InterlockedDecrement
CreateFileA
GetCurrentDirectoryW
HeapFree
CloseHandle
SetCommConfig
ExitProcess
HeapSize
LCMapStringW
Sleep
MultiByteToWideChar
RaiseException
ReadFile
GetVersionExA
GetProcAddress
EnumResourceNamesA
HeapAlloc
LeaveCriticalSection
GetCurrentThreadId
GetFullPathNameW
InitializeCriticalSection
WriteConsoleA
GetModuleHandleA
LCMapStringA
DeleteCriticalSection
SetEndOfFile
ExitProcess
SetUnhandledExceptionFilter
IsValidLocale
WriteConsoleW
UnhandledExceptionFilter
HeapReAlloc
RtlUnwind
GlobalAlloc
GetCommandLineA
IsDebuggerPresent
GetLocaleInfoW
GetCPInfo
GetFullPathNameA
rpcrt4
UuidCreate
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ