Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7a24f0227094f9e7c7281d069c2d141a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7a24f0227094f9e7c7281d069c2d141a.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_7a24f0227094f9e7c7281d069c2d141a
-
Size
280KB
-
MD5
7a24f0227094f9e7c7281d069c2d141a
-
SHA1
46f2383df2f85ee09dc7ebff434dba64753c4fb4
-
SHA256
0a2046b297f13f0d325f319df5704489f72d066094fd591b5b661429d3af67a6
-
SHA512
d6d4638797fbe1cb9f714478bfd1b8a7e83de698c56b563db1e5e10ac31dfe09cc9d8a1bd8e245e4d8816bc65ecfc1dc56fc7bb79ba97c89f70309e25aab6624
-
SSDEEP
6144:8/n2Fe67HFGAwKLi8H7fmHutVxkN1WIX2qqULirz:Mn2F8Aw+j7fCuJYgPrz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7a24f0227094f9e7c7281d069c2d141a
Files
-
JaffaCakes118_7a24f0227094f9e7c7281d069c2d141a.exe windows:4 windows x86 arch:x86
117fce766537b347904d4659962443ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
LCMapStringA
ExitProcess
CloseHandle
GetCurrentProcess
user32
CreateWindowExA
SetWindowLongA
wsprintfA
CloseWindow
CharLowerBuffA
advapi32
RegSetValueA
RegEnumKeyA
RegCloseKey
RegOpenKeyA
RegEnumValueA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueA
RegDeleteValueA
Sections
.text Size: 239KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ