Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_a86ba0ab3473bd350d72adbc709d60a8.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_a86ba0ab3473bd350d72adbc709d60a8
-
Size
395KB
-
MD5
a86ba0ab3473bd350d72adbc709d60a8
-
SHA1
151d0f47ee117d3c5a14a05d0a820d5e647e6951
-
SHA256
4fcab50e5c16df0406a6a430135086e4c3a2b726712f9748a35d4ec21161dbdf
-
SHA512
3d8ff45bd2d9e123db616c8c8321ab14f3e83235023837c51e14391050e559a52295496a1a28480b38bbe459f952f88507f01a5981542f719e0dd787961c8107
-
SSDEEP
6144:9aYfxcx8J5uybal9CAig2df9dKWuOEyfFTRxnwffZ/TWu12BfcSn19H2:4aqxKMybb5KmHfF1xafdTihcSnDW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_a86ba0ab3473bd350d72adbc709d60a8
Files
-
JaffaCakes118_a86ba0ab3473bd350d72adbc709d60a8.exe windows:4 windows x86 arch:x86
cfaca42da6e28b6951c2f2e6cab3dc7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
GetCurrentProcess
CloseHandle
CreateFileA
LCMapStringA
user32
wsprintfA
CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA
advapi32
RegQueryValueA
RegCreateKeyA
RegEnumValueA
RegSetValueA
RegDeleteValueA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
Sections
.text Size: 4KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ