Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_96ed8f4b642cab95be106ff4961c78b0.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_96ed8f4b642cab95be106ff4961c78b0.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_96ed8f4b642cab95be106ff4961c78b0
-
Size
393KB
-
MD5
96ed8f4b642cab95be106ff4961c78b0
-
SHA1
46d3cb9e4c9fb2dafa02505e8390942d365a619d
-
SHA256
e97b1e5eaa3e7bc4904a04619bcf68d593c843165e8e8dc574673b354f8b2744
-
SHA512
764958ed0ead61136f5e65aecd5fd0aec0ed96f38f819c0da446fd9702ecb4daa63692fe2f315d351cb13d8381b30eb6b9bbb02eaf686e9ee63a84569a1be2b8
-
SSDEEP
6144:gOYpQUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7OK88:g3QvULyjQorymC/aWYuosit3ZaOK8Un
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_96ed8f4b642cab95be106ff4961c78b0
Files
-
JaffaCakes118_96ed8f4b642cab95be106ff4961c78b0.exe windows:4 windows x86 arch:x86
7ab6775441c2d04ef2f2182e201e4f62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
LoadLibraryExA
LocalFree
LocalLock
GetConsoleCP
Sleep
HeapCreate
FindClose
GetLastError
GetCalendarInfoA
FreeEnvironmentStringsA
CloseHandle
GetACP
GlobalUnlock
CreateFileA
TlsGetValue
CreateFileMappingA
FindAtomA
GetModuleHandleA
GetConsoleAliasW
user32
DefWindowProcW
CheckRadioButton
GetDlgItem
DispatchMessageA
DrawEdge
CallWindowProcA
GetDC
FillRect
DrawTextA
SetFocus
GetIconInfo
CopyRect
IsWindow
MessageBoxA
setupapi
SetupCloseLog
CM_Add_Range
SetupCloseInfFile
CMP_Report_LogOn
CM_Add_IDA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ