Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_22eb545c6486bacf5ad256511a505963.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_22eb545c6486bacf5ad256511a505963
-
Size
137KB
-
MD5
22eb545c6486bacf5ad256511a505963
-
SHA1
1da826b8eac4cf256e261ddb8034f692e6410687
-
SHA256
767f95992150ea53e96fa67f2c1c74cb9dc104922284b557f912a7d25859de77
-
SHA512
59542ec6c87bbefe7961004e1ac96548a6f0b2cb2d0c713100a115f9d7c62b48ca442216cf3605c62b6b3f43a420bbe6f69ceb4d2e3c87fc9de61da40caf1fca
-
SSDEEP
3072:/56iv5NOEJRdRePLCZPsbFP5jwaaHw7Koj4raFDT2B4G:/dBNLJXReP2dO11WB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_22eb545c6486bacf5ad256511a505963
Files
-
JaffaCakes118_22eb545c6486bacf5ad256511a505963.exe windows:65535 windows x86 arch:x86
99f27e6fdeeab53a90cc9b3b35476a82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetDateFormatA
GetLastError
msvcrt
__setusermatherr
_adjust_fdiv
_initterm
__set_app_type
_except_handler3
__p__commode
__p__fmode
Sections
.text Size: 60KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsr1 Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE