Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_65c7ad50698a62817c8dc71251d5deb5.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_65c7ad50698a62817c8dc71251d5deb5.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_65c7ad50698a62817c8dc71251d5deb5
-
Size
276KB
-
MD5
65c7ad50698a62817c8dc71251d5deb5
-
SHA1
747cae7bdadfae2aace7fdc3118c566bda94cb41
-
SHA256
f34b6ff726164cfe63857d7f4a4cf975049b79468a641c515e1ac779750c7236
-
SHA512
e6fcd718f6e3fc296024b41c7c18de4426ff5e651feb04d896298dccbff59bb2e1a7b16ce7d51cf16928e097aeec5a0ce9f8b42eec2eeb54858974393233e377
-
SSDEEP
6144:Kx2baoXVgebPAuOplAZGOgAbzqfvWQX8zy0GnhZZ7i+vXl2h7VnI:9JqlhOgAPqfvWN+0GfNHfl2FVn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_65c7ad50698a62817c8dc71251d5deb5
Files
-
JaffaCakes118_65c7ad50698a62817c8dc71251d5deb5.exe windows:4 windows x86 arch:x86
5adec0b7d0f1a52e4618fe037cbc7488
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddLocalAlternateComputerNameA
IsDBCSLeadByte
WideCharToMultiByte
EnumResourceLanguagesW
FindFirstFileA
SetFilePointer
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
EnumResourceTypesW
GetModuleHandleA
CreateMailslotW
lstrlenA
GlobalHandle
ReadFile
GetCurrentThreadId
FindNextFileA
FindClose
oleacc
AccessibleChildren
CreateStdAccessibleProxyW
newdev
UpdateDriverForPlugAndPlayDevicesA
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ