Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_3fb6e55bdaef76792eaa3a5de966e50d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3fb6e55bdaef76792eaa3a5de966e50d.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_3fb6e55bdaef76792eaa3a5de966e50d
-
Size
276KB
-
MD5
3fb6e55bdaef76792eaa3a5de966e50d
-
SHA1
bfe75874b5236add40d8e8f7fded0c5e782f4ee5
-
SHA256
7383b5ddf15b6741cc79d391bbf7b581eb532c3b7e1a43e140275f70a9aaa76a
-
SHA512
83f166536662f8bcb4c556907f533934dca1b4738e9f1b46af476f1a6c30c98df112f7ff4e78c82b190996a12513e35ab17936d4683c9e76528a973259d86f5d
-
SSDEEP
6144:sd80l6OwqCE3H4s2+nf6HcsdSifjrMK4tz8zmkT:30krfyHVLf68sdSeT3T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_3fb6e55bdaef76792eaa3a5de966e50d
Files
-
JaffaCakes118_3fb6e55bdaef76792eaa3a5de966e50d.exe windows:4 windows x86 arch:x86
3c2a651a2c79747357c1dec4816ca54b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetProcAddress
HeapFree
GlobalAddAtomW
EnumResourceNamesW
SetLastError
CloseHandle
GetProcessHeap
GetModuleHandleW
InterlockedExchange
LockResource
GetCommandLineW
EnumResourceNamesA
LoadResource
FormatMessageW
FindResourceExW
GlobalFree
LoadLibraryA
FindFirstFileW
GetLastError
LocalFree
EnumResourceTypesW
RaiseException
EnumResourceLanguagesW
SizeofResource
GetDateFormatA
GetCurrentDirectoryW
FindNextFileA
FindFirstFileA
HeapAlloc
Sleep
user32
PeekMessageA
wsprintfW
PostThreadMessageA
EnumWindows
MessageBoxA
GetMessageA
KillTimer
DispatchMessageA
IsWindowVisible
LoadStringA
CharNextA
GetWindowTextA
GetWindowThreadProcessId
CharUpperA
SetTimer
wsprintfA
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 147KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ