Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_72016edb08a7fdd7f1f8643ee3d4192a.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_72016edb08a7fdd7f1f8643ee3d4192a.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_72016edb08a7fdd7f1f8643ee3d4192a
-
Size
197KB
-
MD5
72016edb08a7fdd7f1f8643ee3d4192a
-
SHA1
f47032dfe1fa7594b518fb247bbe9ae7ef7263d0
-
SHA256
a981b56dca8903a4cb4fb154f36b021d2aecf70e16f05815461650666af4f9c2
-
SHA512
cf1e50ca8a9bd3692d77a8846e63f9aba5d782a55664fd9fcbfa518fb8adcc5e358a4cff22d2627a5b49f20f6e12f8515615f16811f5d8db16b68aaedc93fd95
-
SSDEEP
3072:IJh43aJK0KdhDzgHKEevptK3GibiqZP+KBOFXpoSbZpL4QIm436qSukrTNj:8e3zgqEi03GiOCDgdpjlpL4bb6Fpj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_72016edb08a7fdd7f1f8643ee3d4192a
Files
-
JaffaCakes118_72016edb08a7fdd7f1f8643ee3d4192a.exe windows:4 windows x86 arch:x86
84673d3f98dde4c70b5b2231de84a6b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
setupapi
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
msimg32
AlphaBlend
user32
LoadIconW
LoadImageW
IsWindow
MapVirtualKeyW
IsIconic
SetWindowPos
GetSystemMetrics
GetParent
GetWindowPlacement
SetWindowPlacement
DestroyWindow
UpdateWindow
RealGetWindowClass
IsZoomed
ShowWindow
SetForegroundWindow
kernel32
LoadLibraryA
GetCurrentProcessId
CreateFiberEx
GetCurrentProcess
CloseHandle
QueryPerformanceCounter
GetProcessHeap
GetLastError
GetStartupInfoA
FoldStringW
TlsFree
TerminateThread
SetUnhandledExceptionFilter
CreateSemaphoreW
GetLocaleInfoW
ReleaseSemaphore
IsDebuggerPresent
GetCommandLineW
VirtualProtect
FreeLibrary
GetModuleHandleW
EnumResourceNamesA
RaiseException
TerminateProcess
Sleep
GetCurrentThreadId
FlushFileBuffers
LoadLibraryW
InterlockedCompareExchange
WaitForSingleObject
LocalAlloc
InterlockedExchange
GetSystemTimeAsFileTime
UnhandledExceptionFilter
TlsAlloc
TlsGetValue
GetTickCount
DeleteFileW
GetProcAddress
GetModuleFileNameW
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ