Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6d2c536976f7aaebca2551f244d2b418.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6d2c536976f7aaebca2551f244d2b418.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_6d2c536976f7aaebca2551f244d2b418
-
Size
197KB
-
MD5
6d2c536976f7aaebca2551f244d2b418
-
SHA1
a75f90203c23619511ca83314c49e829381f3b64
-
SHA256
c0468f8de5fc52a985a37fc3cf0ffccf3b7e60c4055bcd2b3c716beb75178f6b
-
SHA512
342bc964e813d4b5076a910b5c4d3f46b1a505287c603e5993308d5e69cf68450ddaae24cf4e57e46ad83d4892cc48a77e3ae2855126f20e64faf8add25d5dee
-
SSDEEP
3072:IJh43aJK0KdhDzgHKEevptK3GibiqZP+KBOFXpoSbZpL4QIm436qSukrTNj:8e3zgqEi03GiOCDgdpjlpL4bb6Fpj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6d2c536976f7aaebca2551f244d2b418
Files
-
JaffaCakes118_6d2c536976f7aaebca2551f244d2b418.exe windows:4 windows x86 arch:x86
84673d3f98dde4c70b5b2231de84a6b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
setupapi
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
msimg32
AlphaBlend
user32
LoadIconW
LoadImageW
IsWindow
MapVirtualKeyW
IsIconic
SetWindowPos
GetSystemMetrics
GetParent
GetWindowPlacement
SetWindowPlacement
DestroyWindow
UpdateWindow
RealGetWindowClass
IsZoomed
ShowWindow
SetForegroundWindow
kernel32
LoadLibraryA
GetCurrentProcessId
CreateFiberEx
GetCurrentProcess
CloseHandle
QueryPerformanceCounter
GetProcessHeap
GetLastError
GetStartupInfoA
FoldStringW
TlsFree
TerminateThread
SetUnhandledExceptionFilter
CreateSemaphoreW
GetLocaleInfoW
ReleaseSemaphore
IsDebuggerPresent
GetCommandLineW
VirtualProtect
FreeLibrary
GetModuleHandleW
EnumResourceNamesA
RaiseException
TerminateProcess
Sleep
GetCurrentThreadId
FlushFileBuffers
LoadLibraryW
InterlockedCompareExchange
WaitForSingleObject
LocalAlloc
InterlockedExchange
GetSystemTimeAsFileTime
UnhandledExceptionFilter
TlsAlloc
TlsGetValue
GetTickCount
DeleteFileW
GetProcAddress
GetModuleFileNameW
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ