Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_075de542023cb40f7133c287795aa1a2.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_075de542023cb40f7133c287795aa1a2.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_075de542023cb40f7133c287795aa1a2
-
Size
290KB
-
MD5
075de542023cb40f7133c287795aa1a2
-
SHA1
120121c1681f82e1103fab2b55a1e52170c30cfa
-
SHA256
94584150ab356eeb75ec8e6cab95fa66a982c2257bc5c77239093cf21ec697ac
-
SHA512
06f46b66e31aa4cb8e345458092c01954a04e54d989090917a9727f091474332a73cbfc3bd8f6130e431fab3bda07580d9642bff8ae9c8faba4d32e8cc3d2a51
-
SSDEEP
6144:3brptm16+nJqid8yLTwxV4QyG6JVpdutSiSxnxD:3brptmwq1dN+N6rpdOSiSxZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_075de542023cb40f7133c287795aa1a2
Files
-
JaffaCakes118_075de542023cb40f7133c287795aa1a2.exe windows:5 windows x86 arch:x86
03d30f4d0edc6668cc2374075962a9e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
DeleteCriticalSection
UnhandledExceptionFilter
ReleaseSemaphore
CreateThread
IsDebuggerPresent
LeaveCriticalSection
VirtualProtectEx
ReadProcessMemory
ResumeThread
SetThreadPriority
OpenProcess
GetShortPathNameW
FreeLibrary
FindFirstFileW
EnterCriticalSection
GetSystemTime
WaitForSingleObject
GetDriveTypeW
GetSystemTimeAsFileTime
CreateFileW
FindClose
CreateDirectoryW
GetFileSize
CreateSemaphoreA
GetCurrentThreadId
SystemTimeToFileTime
SetUnhandledExceptionFilter
CloseHandle
FindNextFileW
GetExitCodeThread
VirtualAlloc
psapi
GetProcessMemoryInfo
ole32
CoCreateInstance
CoUninitialize
StgOpenStorageEx
CoInitializeEx
CoTaskMemFree
StgCreateStorageEx
CoInitialize
advapi32
RegCloseKey
RegOpenKeyExW
OpenProcessToken
userenv
GetUserProfileDirectoryW
esent
JetCreateIndex
JetDelete
JetUnregisterCallback
JetTerm2
JetCreateTableColumnIndex2
JetRestore
JetRegisterCallback
JetGetCurrentIndex
JetCreateInstance
JetEndExternalBackupInstance
JetCreateTable
JetPrepareToCommitTransaction
JetAttachDatabaseWithStreaming
msctfp
GetProxyDllInfo
DllGetClassObject
DllUnregisterServer
DllRegisterServer
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 260KB - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ