Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_752f84724826e731ee77ae8ff0ebb1e0.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_752f84724826e731ee77ae8ff0ebb1e0.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_752f84724826e731ee77ae8ff0ebb1e0
-
Size
206KB
-
MD5
752f84724826e731ee77ae8ff0ebb1e0
-
SHA1
948552c796579914572b1b6e6a6a4dfe80f46e2a
-
SHA256
fe1508dd290301b680248d01dfe3fcbcbf91802e3f5705b6b0d52d7820b353f9
-
SHA512
03884dfaba5f6fe225010f71407517a48e65dd2ecd8f7083fa27c9d9f02d6907751a31a170186ee5dab8abd844537128b6ff705ed6ce1dd97e98580a4a66c079
-
SSDEEP
3072:qZKoxQb+k9QvlM2UomDQEGPjRHfNtPYuD/V9P8rMz8csf2jacKUSI7Lj/PKbcVGX:Qrox9QUkEq9/nP3D/jP8Pcu65GbNwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_752f84724826e731ee77ae8ff0ebb1e0
Files
-
JaffaCakes118_752f84724826e731ee77ae8ff0ebb1e0.exe windows:4 windows x86 arch:x86
23f02a6162613533409b236d2e0bdf40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetModuleHandleA
GetSystemDirectoryW
MulDiv
CreateMutexW
FindAtomW
EnumDateFormatsW
FindResourceA
CreateSemaphoreW
GetNamedPipeInfo
RaiseException
FreeResource
ConnectNamedPipe
GlobalGetAtomNameW
InitializeCriticalSection
WaitForSingleObject
GetPriorityClass
MoveFileA
SetErrorMode
GetNumberFormatA
GetLocalTime
GetTempPathA
lstrcat
GlobalDeleteAtom
SetLocaleInfoA
EnumCalendarInfoA
WinExec
lstrcpy
GetUserDefaultLCID
SetLocaleInfoW
IsBadStringPtrA
AddAtomW
GlobalGetAtomNameA
GetDateFormatW
GetMailslotInfo
AddAtomA
SetCurrentDirectoryA
RemoveDirectoryW
SetComputerNameW
GetVersionExA
CreateNamedPipeA
GetProcAddress
lstrcmpW
ReplaceFileW
Beep
SetCalendarInfoW
SystemTimeToFileTime
ReplaceFileA
IsBadWritePtr
user32
wvsprintfW
EmptyClipboard
GetDC
MonitorFromPoint
CreatePopupMenu
WinHelpA
GetWindowLongW
GetMenuItemID
CharUpperA
SetParent
RegisterClassExW
CreateCaret
FindWindowA
UpdateWindow
DrawIcon
GetKeyState
SetWindowPos
ShowCursor
GetClassInfoW
GetActiveWindow
RegisterWindowMessageW
OffsetRect
EnableWindow
GetForegroundWindow
GetMenuItemInfoW
DefFrameProcW
LoadMenuW
gdi32
EnumMetaFile
CreateBitmap
DeleteMetaFile
SetDIBColorTable
GetAspectRatioFilterEx
SetWindowExtEx
ExtTextOutW
SetTextColor
GetClipBox
CreateEnhMetaFileW
EndPath
CreateDIBitmap
GetTextExtentPointA
advapi32
RegFlushKey
RegOpenKeyExW
RegOpenKeyExW
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
version
VerFindFileA
VerLanguageNameW
winmm
mciDriverNotify
midiInGetDevCapsA
timeGetTime
midiOutCachePatches
midiOutReset
Sections
.ZkOK Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.A Size: 2KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Lg Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.c Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Bbrdqv Size: 4KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ