Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7d67ea6f1cd1b676557c96601c84a645.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_7d67ea6f1cd1b676557c96601c84a645
-
Size
400KB
-
MD5
7d67ea6f1cd1b676557c96601c84a645
-
SHA1
c8b5445a6a6d103a5f46a8efd550b9a19efb0171
-
SHA256
c3e2406b909be79406b81a8cc57a27c7c52e66400e7c72fff990117ff51c3624
-
SHA512
cf36d96cff97125f07258390f74b74d12df417df2a3ad9777a5ebe9be94cc0e44c516f2ea2955298d006af4106c736a34e2fa3fbee9208620adeceb5150b87f5
-
SSDEEP
6144:TesmzyHFkzabvKN5jZO+457u+XbhpcMRLLHyoHs9Bk2596fzji4Jcz6Hr:TGyHm/NRUr7hLhp3XSoHqkYIJ5Hr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7d67ea6f1cd1b676557c96601c84a645
Files
-
JaffaCakes118_7d67ea6f1cd1b676557c96601c84a645.exe windows:4 windows x86 arch:x86
a6c06faeef749066e12148fb3fd3ff58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
Module32Next
GetTempPathA
GetEnvironmentVariableA
lstrlenA
GetShortPathNameA
ResumeThread
FindResourceA
VirtualAllocEx
GetModuleFileNameA
LoadResource
CreateProcessA
Sleep
LoadLibraryA
GetProcAddress
lstrcatA
ReadProcessMemory
GetThreadContext
Process32Next
Process32First
Module32First
CreateToolhelp32Snapshot
lstrcpyA
SetEndOfFile
CreateFileW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
WriteFile
GetConsoleCP
GetConsoleMode
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetStdHandle
ReadFile
SetHandleCount
GetFileType
SetFilePointer
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CloseHandle
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetLocaleInfoW
user32
MessageBoxA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
shell32
ShellExecuteA
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 272KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ