Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_a1c70e96baaa0708a254d7594098dfff.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_a1c70e96baaa0708a254d7594098dfff.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_a1c70e96baaa0708a254d7594098dfff
-
Size
174KB
-
MD5
a1c70e96baaa0708a254d7594098dfff
-
SHA1
eeee5937c5c59114a8d5f18b02f8e7606704e907
-
SHA256
6d2cf4d4a4c532e87330f37aff3502515647fddae56bd59c736bbac2ec91c793
-
SHA512
d0902a5f699ff1a1b91db56818e342f9f4a3212a247d939672a2e4ece94ba727e5640d0e5a79765bbf6de7176e29ab26e0d347fed115fe8a1765266b9c2447db
-
SSDEEP
3072:N/NnJ8jM304+16bvx67wm2EwiID0BFkxFRmv7WFwrKzSU/TkRjOQyr/8:NNqukMm2E0KKVBqKSzVn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_a1c70e96baaa0708a254d7594098dfff
Files
-
JaffaCakes118_a1c70e96baaa0708a254d7594098dfff.exe windows:4 windows x86 arch:x86
98372600cc314dda2c236ba00f9c04ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shlwapi
PathCombineW
PathFileExistsW
kernel32
lstrcmpiW
GlobalFree
lstrcpyA
GetTickCount
GetACP
GetProcessHandleCount
lstrcpyA
WideCharToMultiByte
EnumResourceNamesW
GetCPInfo
MultiByteToWideChar
FindClose
GlobalAlloc
lstrcpyW
GetLastError
LockResource
InitializeCriticalSection
FreeEnvironmentStringsA
lstrlenW
OutputDebugStringW
GetModuleHandleW
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoRegisterClassObject
CoCreateInstance
StringFromGUID2
CoUninitialize
CoInitialize
CoRevokeClassObject
CoTaskMemFree
StringFromCLSID
user32
PostThreadMessageW
KillTimer
GetDC
SendMessageA
SetTimer
CharNextW
TranslateMessage
GetMessageW
DispatchMessageW
wsprintfW
CharUpperW
UnregisterClassA
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ