Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7998e54e3a219f78d735a28ad02d1668.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7998e54e3a219f78d735a28ad02d1668.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_7998e54e3a219f78d735a28ad02d1668
-
Size
287KB
-
MD5
7998e54e3a219f78d735a28ad02d1668
-
SHA1
a2d3e65980940f58810d866b23390c32a8609d75
-
SHA256
8661af4bd0659befd7a844541a4b1f52cfa9c462ba302b39c22a26e75de7eb9c
-
SHA512
c855cee80f132ef02231fee21647f571e058f9f67927f85b269ec9c4c0d31c1a23308e93aefcd6a64a67dae0adfcc13571b14e356f21c0af2cacede214db6b3e
-
SSDEEP
6144:8P8vZ30vdymlFmcVYuHUpGrTjWczxpevTPj3WGCGZscdi4w83J:vxkvd3RHzxTbGy4wG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7998e54e3a219f78d735a28ad02d1668
Files
-
JaffaCakes118_7998e54e3a219f78d735a28ad02d1668.exe windows:4 windows x86 arch:x86
774acf1add71f39fe9fbe733775406b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
GetPrivateProfileStringW
GlobalFindAtomW
ExpandEnvironmentStringsW
lstrlenA
FreeLibrary
ReleaseMutex
LoadLibraryExW
CopyFileW
FindFirstFileW
LoadLibraryExA
GetPrivateProfileIntW
GetCurrentDirectoryW
FindNextFileW
GetSystemInfo
lstrcmpiW
LocalFree
HeapAlloc
GetCurrentProcessId
LoadLibraryW
EnumResourceLanguagesA
FindClose
GetModuleHandleA
HeapFree
GetPrivateProfileIntW
GetWindowsDirectoryA
SetFileAttributesW
WritePrivateProfileStringW
WaitForSingleObject
GetSystemDirectoryW
GetProcessHeap
CreateMutexW
GetModuleHandleW
GetCurrentProcess
shlwapi
GetAcceptLanguagesA
PathIsRelativeW
StrCmpIW
UrlUnescapeW
UrlCreateFromPathW
PathCreateFromUrlW
PathFindExtensionW
PathRemoveFileSpecW
PathAppendW
PathCombineW
rpcrt4
UuidCreate
Sections
.text Size: 152KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ