Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_a3a36fec487f44d087bb90f3eb052b6c.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_a3a36fec487f44d087bb90f3eb052b6c
-
Size
198KB
-
MD5
a3a36fec487f44d087bb90f3eb052b6c
-
SHA1
5387df31b2a60d172fd38b198bc3deeef4f59200
-
SHA256
18b8b770461734681869971080662175b78e19a7d888dddcc363536960ef9632
-
SHA512
0b42db3e558cf371161a32454bec0d7a5622543c74d7874fb7c3ae1b5d3a32ca8fddcd9fe3f7c4b2fbb49b01614b9e8fd8af72a4b76b6ca8378867f6e68c8003
-
SSDEEP
3072:RjcQPoihTA7yirtDRuxErDP1QeaR+GYp2whoD2cRRkxbx1B9EjwB:RjcQPF7uduerL14UGA2whoD2gK+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_a3a36fec487f44d087bb90f3eb052b6c
Files
-
JaffaCakes118_a3a36fec487f44d087bb90f3eb052b6c.exe windows:4 windows x86 arch:x86
23d6282c0ce1882c0761e4a18fda9c52
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathCombineW
SHGetValueW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
rpcrt4
NdrByteCountPointerFree
UuidCreate
winmm
timeEndPeriod
kernel32
FlushInstructionCache
WaitForSingleObject
GetLastError
TlsSetValue
GlobalAlloc
CreateFileW
GetCurrentProcess
SetLastError
ExitProcess
VirtualProtectEx
DuplicateHandle
GetVersionExW
GlobalFree
SetLocaleInfoW
GetCurrentThreadId
GlobalLock
GlobalUnlock
WriteProcessMemory
GetThreadContext
GetTempPathW
newdev
UpdateDriverForPlugAndPlayDevicesW
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ