Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_3d8f7dcbbe857b54f6932b4b75ccaf61.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3d8f7dcbbe857b54f6932b4b75ccaf61.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_3d8f7dcbbe857b54f6932b4b75ccaf61
-
Size
285KB
-
MD5
3d8f7dcbbe857b54f6932b4b75ccaf61
-
SHA1
41668cd07769e6c7d8b5c9548dbe49c79222b79d
-
SHA256
460f2e61383cb31e73e109dc6d07ad154c403f7066cbd27836a500aca798df0f
-
SHA512
fb375d7924d81fb22f05e7006c4bf1a99ca1360342b86556feadb293910598feb6584842ad481ac047ef47913aa8a1393c3ade03e52039d286aad1291eb73143
-
SSDEEP
6144:pt+0Ju+y21IszRyAB3pKE7rrmhmOKdd0K6PfmlYM1T:do+y2S03HHrm1QP6Pfm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_3d8f7dcbbe857b54f6932b4b75ccaf61
Files
-
JaffaCakes118_3d8f7dcbbe857b54f6932b4b75ccaf61.exe windows:4 windows x86 arch:x86
e5265db6703335c860a760058ba1bd93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
newdev
UpdateDriverForPlugAndPlayDevicesW
user32
GetDlgItem
DestroyWindow
EnumChildWindows
CreateWindowExW
SendMessageA
IsWindow
GetWindowThreadProcessId
iphlpapi
GetIpAddrTable
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
shell32
SHGetFolderPathW
kernel32
VirtualAlloc
AddAtomA
GetModuleFileNameA
GetEnvironmentStrings
UnhandledExceptionFilter
HeapSize
HeapCreate
TlsGetValue
WriteFile
GetStdHandle
GetLocaleInfoA
TerminateProcess
HeapDestroy
GetCPInfo
GetFileType
SetHandleCount
SetLastError
EnumResourceNamesA
VirtualFree
TlsSetValue
VirtualQuery
GetCurrentProcess
IsBadWritePtr
TlsFree
FreeEnvironmentStringsW
GetSystemInfo
GetStartupInfoA
InterlockedExchange
lstrcatA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
QueryPerformanceCounter
TlsAlloc
GetVersionExA
SetEndOfFile
GetACP
GetCurrentProcessId
GetOEMCP
SetUnhandledExceptionFilter
Sections
.text Size: 151KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ