Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_c8af4339c7fb630d478e0241fc27b188.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_c8af4339c7fb630d478e0241fc27b188
-
Size
179KB
-
MD5
c8af4339c7fb630d478e0241fc27b188
-
SHA1
677027b99189af73c3f8faa1966e91a3fbcec2b9
-
SHA256
17c286f1836dc8b964fa46ed2b68721d6ee5dfbb42ad269a759017f2abf955e3
-
SHA512
766c07d7bce3817c917a08041645f984bdbd89096e284faee223c16663f615fbc014b76207956dfc78e53d17890fb2821de7c2e03e821a1b4227bb688377b05b
-
SSDEEP
3072:nBvzh6VV1JGGmHyq6WlSjDOW99HSuVVMcuohLegBWKdf4EE1zjJnqQdq2/Og1QPS:5t0rJG/qPOYHSqMcfhKVVEQndRGOV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_c8af4339c7fb630d478e0241fc27b188
Files
-
JaffaCakes118_c8af4339c7fb630d478e0241fc27b188.exe windows:4 windows x86 arch:x86
0e42e38e7f6d03b1ad0541e2c16229fd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
VirtualAlloc
BaseFlushAppcompatCache
GetACP
GetSystemTimeAsFileTime
SetEndOfFile
InterlockedExchange
SetLastError
EnumResourceTypesA
TlsFree
HeapCreate
VirtualFree
CreateMailslotW
HeapDestroy
IsBadWritePtr
VirtualQuery
TlsAlloc
GetLocaleInfoA
newdev
UpdateDriverForPlugAndPlayDevicesA
oleacc
AccessibleChildren
CreateStdAccessibleProxyA
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ