Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_ab1511354f5335345c749c1fdae82c10.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_ab1511354f5335345c749c1fdae82c10.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_ab1511354f5335345c749c1fdae82c10
-
Size
171KB
-
MD5
ab1511354f5335345c749c1fdae82c10
-
SHA1
c537e09103702ef7721ead2ee3cccfa114f23a92
-
SHA256
7c9bbd2f437323203827b635edce5270ccc1d725540bf4c0050c38d60cb86486
-
SHA512
0c5f2541c0cad358f2aabf0294349f9c5c01af9e8586bb63cc12096ab181ac41827de5f49cc641ac4eeccedf1815798765b448509b7d51854d9869ce05e70500
-
SSDEEP
3072:/9ocr+PgxoG7R/T4Js8o1xlPU6GYYdNeYT/vYRwxR7QCBZwPPB9RfRn/FDyJ6:/VyGvt20vl6YYdNeWYRwzEXPpjGJ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_ab1511354f5335345c749c1fdae82c10
Files
-
JaffaCakes118_ab1511354f5335345c749c1fdae82c10.exe windows:4 windows x86 arch:x86
19048ba8c514b1205a07c4a48eb505c8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyA
lstrcpynW
GlobalAlloc
OutputDebugStringW
lstrlenW
LockResource
CheckRemoteDebuggerPresent
lstrcpyW
EnumResourceTypesW
GlobalFree
GetCPInfo
FindClose
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
GetTickCount
DeleteCriticalSection
GetACP
lstrcmpiW
GetLastError
GetModuleHandleW
user32
PostThreadMessageW
SetTimer
GetMessageW
TranslateMessage
CharUpperW
wsprintfW
GetAncestor
CharNextW
GetDC
KillTimer
DispatchMessageW
UnregisterClassA
winspool.drv
DocumentPropertiesW
Sections
.text Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ