Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_a4e6731d6dfb5fc2aec67f948531f2a3.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_a4e6731d6dfb5fc2aec67f948531f2a3.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_a4e6731d6dfb5fc2aec67f948531f2a3
-
Size
280KB
-
MD5
a4e6731d6dfb5fc2aec67f948531f2a3
-
SHA1
2547612b3e99595ec3f781b3f4330e1984187d4b
-
SHA256
22e1a12e81de9af68abc0dfc9297db0d4e85ba89cda1b3f09e861bc16653c671
-
SHA512
9fa8b8c691a1346eac3cd07307eed1956ed1dc44952bd48a2a16e515f88d4cd40fa2f867bb954645a4c848a587c203b0192dfde91a8f49f18ecd771ac2fffa3c
-
SSDEEP
6144:oBfoRaU6E0ugM1Mc+2Pn81iJt2+/XNgjDMr1gkaAO/74+:omV6EgM1pP81it2+/dcDMreky7N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_a4e6731d6dfb5fc2aec67f948531f2a3
Files
-
JaffaCakes118_a4e6731d6dfb5fc2aec67f948531f2a3.exe windows:4 windows x86 arch:x86
e3db0c7f973f2f6a4856aade885c47ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
ExitProcess
CloseHandle
LCMapStringA
LoadLibraryA
GetCurrentProcess
user32
CharLowerBuffA
CreateWindowExA
wsprintfA
CloseWindow
SetWindowLongA
advapi32
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegSetValueA
RegCreateKeyA
RegDeleteValueA
RegCloseKey
Sections
.text Size: 258KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 13B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ