Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_bb9694e4fdd7556909779f2aca72ed07.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_bb9694e4fdd7556909779f2aca72ed07.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_bb9694e4fdd7556909779f2aca72ed07
-
Size
187KB
-
MD5
bb9694e4fdd7556909779f2aca72ed07
-
SHA1
e74fefd342e8bda5363c96f2fe0224c013e57957
-
SHA256
1195b6e737271930b417d14b43b0d48259ba52ec9337ac63ffaa21197d8efa51
-
SHA512
fe176e3171e0b42d63d5b6ff69eb2202d21fdbd2a159bd6d788892dedf15a730f8f49a981c4a3f781b2babfd1319f283c1574439618f22ee1632d12e2dbfcba3
-
SSDEEP
3072:SZ8AZL/T1YtPqk1Njc4e+jvMyiZ81i8qjmfgak05DoA38OiD+pUZgLe0JR8zc7H1:SZ8KT1Ytik1vTJiScAZk05DoAudgLeaP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_bb9694e4fdd7556909779f2aca72ed07
Files
-
JaffaCakes118_bb9694e4fdd7556909779f2aca72ed07.exe windows:4 windows x86 arch:x86
2e0240401cfb963a13284a0494b56d5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
winmm
mciSendCommandA
sndPlaySoundA
advapi32
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
gdi32
CreateFontIndirectA
GetDeviceCaps
CreateRectRgn
EnumFontFamiliesExA
GetStockObject
BitBlt
GetObjectA
DeleteObject
TextOutA
GetTextExtentPoint32A
SetBkMode
DeleteDC
SetTextColor
SaveDC
CreateCompatibleDC
Rectangle
RestoreDC
CreateSolidBrush
SelectObject
DeleteMetaFile
CreateCompatibleBitmap
kernel32
SetTapeParameters
InterlockedExchange
ClearCommError
GetVersion
GetCurrentProcessId
Sleep
EnumResourceNamesA
FindClose
ExitProcess
GetWindowsDirectoryA
GetLocalTime
FindFirstFileA
user32
GetWindowLongA
SetCursor
ReleaseDC
GetSysColor
MoveWindow
SetWindowLongA
GetWindowInfo
SetWindowPos
IsWindow
LoadCursorA
ReleaseCapture
GetDlgItem
GetDC
FillRect
SetCapture
ole32
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ