Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_01afbc75bbd100b6e856376b56d195e3.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_01afbc75bbd100b6e856376b56d195e3.dll
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_01afbc75bbd100b6e856376b56d195e3
-
Size
230KB
-
MD5
01afbc75bbd100b6e856376b56d195e3
-
SHA1
d46e2461fe343246efcf249f022100fd8b8874ff
-
SHA256
15eabef86eb6810f08b2d2bc304cb53101bfb90b51a0c77cd69292235654f4c4
-
SHA512
39b330313dc942f783346dffcff294ab73f6fc39528336fa54405a7215f66993012418adcd3d6f6ae64a1a62006829d720cc91dc933b37fdaf6cdd6ec5b6c921
-
SSDEEP
6144:phta5vRFaiyUglpVanTWe3OSSuApN4obaa:ftKvbaiyD0qe+SSjYa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_01afbc75bbd100b6e856376b56d195e3
Files
-
JaffaCakes118_01afbc75bbd100b6e856376b56d195e3.dll windows:4 windows x86 arch:x86
dd949f9c2ea8d8f2d9dbd7c28c3ed8dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcr80
_onexit
_lock
_crt_debugger_hook
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_except_handler4_common
_encode_pointer
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 630B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE