Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_b930233139d4f03d842e104d6f6afb9d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_b930233139d4f03d842e104d6f6afb9d.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_b930233139d4f03d842e104d6f6afb9d
-
Size
185KB
-
MD5
b930233139d4f03d842e104d6f6afb9d
-
SHA1
5b34cd1b06c9f3d3a65e57e20142d7e358257662
-
SHA256
a3bdf89307e1ff48a04c4a2a92e12674e4bf5c2d2272d152ffd14542074092c1
-
SHA512
5f553a8fa3e4b35ffbc0d840f5b9ea96e53f3311004d8395c798f009add8d5fbc1dfda50e3434967f164748bcb8ee8ccf973c6917a945bc8b2f0bbcc3ebc1327
-
SSDEEP
3072:LEhruDjbqkSoGsBj/4TJPZdxiqfUh17zVhpyfUh+hvHWbh49g3UlAiYN:UrumPEjwrC17J6Uwt+h49eUW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b930233139d4f03d842e104d6f6afb9d
Files
-
JaffaCakes118_b930233139d4f03d842e104d6f6afb9d.exe windows:4 windows x86 arch:x86
20de2f0d368895bd3c63a4b79f86f679
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
CreateFileMappingA
GetCurrentThreadId
GetVersionExW
CreateThread
AddAtomW
GetSystemDirectoryW
GetModuleHandleW
ResetEvent
CreateWaitableTimerA
GetTempPathW
MapViewOfFile
GetCommandLineA
GetExitCodeProcess
WaitForSingleObject
LoadLibraryExW
GetEnvironmentVariableW
FileTimeToSystemTime
MoveFileExW
GetFileAttributesW
CreateFileW
EnumResourceNamesA
CreateEventA
CopyFileW
SetEvent
UnmapViewOfFile
WriteConsoleW
FileTimeToLocalFileTime
WriteFileGather
CloseHandle
CreateProcessW
LocalFree
CreateDirectoryW
GetSystemTime
LocalAlloc
SetFileAttributesW
CreateFileA
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
advapi32
RegDeleteKeyA
RegQueryValueExA
RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegCloseKey
lz32
LZClose
LZCopy
LZOpenFileA
Sections
.text Size: 99KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ