Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_38bf2a8b1f4c73c42b9855ccd13f7c28.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_38bf2a8b1f4c73c42b9855ccd13f7c28.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_38bf2a8b1f4c73c42b9855ccd13f7c28
-
Size
182KB
-
MD5
38bf2a8b1f4c73c42b9855ccd13f7c28
-
SHA1
2cd13b659691d29471e6ac8a61ef138ee73bb50c
-
SHA256
0eb2c8a34b7ba4e0abd4a6d94b20308d403e5eca5f90a8f5921821d4e58768c3
-
SHA512
63480544de946af4ff372ee0bc47abc32f9aff75dfe6b1541ff52df1be61e00221a4e90600fc9f15f0cb6318d133ea9f3d1f597d140df9ec0dd8a3984a39b847
-
SSDEEP
3072:QQEM79d98KzHVu+H6YzNwHyjKTqxBUpJs/gegsrDpV73QxrIUtxgX/LjnAB9ueJz:TD9d98KzIPqOHyjKTqxBdjrgJIUtiX/K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_38bf2a8b1f4c73c42b9855ccd13f7c28
Files
-
JaffaCakes118_38bf2a8b1f4c73c42b9855ccd13f7c28.exe windows:4 windows x86 arch:x86
bc8f39f0cdb456221558ba5fb28fb198
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
user32
GetCapture
FlashWindow
RealGetWindowClassA
UpdateWindow
ValidateRect
DestroyWindow
ReleaseCapture
SetCapture
InvalidateRgn
EnableWindow
IsWindow
ExcludeUpdateRgn
IsWindowEnabled
ValidateRgn
GetUpdateRgn
kernel32
IsBadReadPtr
LocalAlloc
GetLocalTime
CreateFiberEx
SystemTimeToFileTime
FileTimeToSystemTime
FreeLibrary
SetCurrentDirectoryW
SetThreadAffinityMask
GetStringTypeW
FileTimeToLocalFileTime
FindFirstFileW
FindResourceW
EnumResourceNamesW
LoadResource
GetOEMCP
GetSystemDirectoryW
LocalFree
FindClose
LCMapStringW
SetThreadPriority
CompareStringA
GetShortPathNameW
SetEnvironmentVariableW
LocalFileTimeToFileTime
SetErrorMode
GetCurrentProcess
FindNextFileW
SearchPathW
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 512B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ