Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_981ee07a0216169dbcdc7cef1b6ea16f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_981ee07a0216169dbcdc7cef1b6ea16f.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_981ee07a0216169dbcdc7cef1b6ea16f
-
Size
93KB
-
MD5
981ee07a0216169dbcdc7cef1b6ea16f
-
SHA1
28fb04d31cb7bd68878338bef73034aad85c2e69
-
SHA256
3a55fb65171b951ca2be599cf18b07064fe5f3e240563bde6d1d1e39bfc3e8bc
-
SHA512
ae662287f5371069d5ce2a46fd27d7e80d869c0c3e5a92bd0992fcc9961717b96070a4889550adf7dbf69d150f6f09d4fd5fd13872b729fb999c31d134f32bd0
-
SSDEEP
1536:N8MqzS35EOZdnwYsafX+c5Lcjc125u/VEbbl3h6UL+EYzzwULRRPKdN:N50S35xwuv+c5Lbbm5dLGzl/KdN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_981ee07a0216169dbcdc7cef1b6ea16f
Files
-
JaffaCakes118_981ee07a0216169dbcdc7cef1b6ea16f.exe windows:5 windows x86 arch:x86
00a6f0d700cebff78e797e887484a47e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindowVisible
IsWindow
BeginPaint
WindowFromPoint
EndPaint
SetWindowTextA
LoadIconA
LoadCursorA
RegisterClassExW
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
gdi32
GetTextColor
CreateFontIndirectA
DeleteObject
FrameRgn
GetStockObject
SetRectRgn
kernel32
GetThreadLocale
GetEnvironmentVariableA
GetEnvironmentStrings
GetStartupInfoA
GetTickCount
InitializeCriticalSection
EnterCriticalSection
LoadLibraryA
GetProcAddress
HeapDestroy
HeapFree
GetLastError
SetFileAttributesA
GetDateFormatA
CompareStringA
FreeLibrary
HeapAlloc
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ