Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7fb215db072c4d8e1a4c03595ae96565.exe
Resource
win7-20240729-en
General
-
Target
JaffaCakes118_7fb215db072c4d8e1a4c03595ae96565
-
Size
1.1MB
-
MD5
7fb215db072c4d8e1a4c03595ae96565
-
SHA1
799d1ff4580ffdb006f6e22cd65cc06df7bcc56f
-
SHA256
23ff7de42ea09c954f36e8554632547c3365fe821e11bb1eac061e1115ba15d4
-
SHA512
751e4fbda1270a5ccdc90eab5a4a85c47ee12f7f6b3a02438eb20f23d87b7f7f55407899f8b422a705e1460ca821a0bf28f5d61bfd02a60abe2ed58878dc4752
-
SSDEEP
24576:tPGSY91VwNJcFMqTNnmJa4dMyMPy+mfeK15bSlC+3keG0q:1GJyV28KWfecFS9dG0q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7fb215db072c4d8e1a4c03595ae96565
Files
-
JaffaCakes118_7fb215db072c4d8e1a4c03595ae96565.exe windows:4 windows x86 arch:x86
8cb987c79d5402d49bbd4392cc7a1ada
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
WSAStartup
gethostname
gethostbyname
inet_addr
WSACleanup
winmm
mixerSetControlDetails
joyGetPosEx
mciSendStringA
joyGetDevCapsA
waveOutGetVolume
mixerGetLineControlsA
mixerGetControlDetailsA
mixerGetLineInfoA
mixerOpen
mixerGetDevCapsA
mixerClose
waveOutSetVolume
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
comctl32
ord6
ImageList_AddMasked
ord17
ImageList_GetIconSize
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
kernel32
Beep
MultiByteToWideChar
SetEnvironmentVariableA
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
CreateProcessA
MulDiv
ReadFile
GetFileSize
CreateFileA
GetEnvironmentVariableA
DeviceIoControl
GetFileAttributesA
CreateDirectoryA
WriteFile
GlobalSize
GetDateFormatA
GetLocalTime
GetSystemTime
GetComputerNameA
GetWindowsDirectoryA
GetTempPathA
GetFullPathNameA
GetShortPathNameA
SetLastError
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetExitCodeProcess
ReadProcessMemory
WriteProcessMemory
TerminateProcess
SetPriorityClass
MoveFileA
GetCurrentProcessId
GetTimeFormatA
GetDiskFreeSpaceA
SetErrorMode
SetVolumeLabelA
GetVolumeInformationA
GetDriveTypeA
DeleteFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
FreeLibrary
LoadLibraryA
CompareStringA
RemoveDirectoryA
CopyFileA
GetCurrentProcess
GetPrivateProfileStringA
WritePrivateProfileStringA
FormatMessageA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
SystemTimeToFileTime
FileTimeToSystemTime
GetStartupInfoA
HeapSize
HeapFree
HeapReAlloc
ExitProcess
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
OutputDebugStringA
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
DeleteCriticalSection
GetVersionExA
CreateThread
SetThreadPriority
GetExitCodeThread
CloseHandle
CreateMutexA
GetLastError
lstrcmpiA
GetCurrentThreadId
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalFree
InitializeCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetCurrentDirectoryA
GetModuleHandleA
GetProcAddress
Sleep
SetCurrentDirectoryA
GetTickCount
LCMapStringA
LCMapStringW
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointer
GetCommandLineA
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetLocaleInfoA
VirtualProtect
GetSystemInfo
SetStdHandle
QueryPerformanceCounter
OpenProcess
SetEndOfFile
user32
SetWindowTextA
IsWindowVisible
GetWindowRect
GetQueueStatus
SetWindowRgn
SetForegroundWindow
IsIconic
GetWindowTextLengthA
GetDlgItem
MessageBeep
EnumClipboardFormats
ClientToScreen
GetCaretPos
GetCursor
MoveWindow
SetActiveWindow
EnumChildWindows
SetFocus
EnableWindow
InvalidateRect
SetWindowPos
EnumWindows
ReleaseDC
GetDC
GetIconInfo
SetDlgItemTextA
SendDlgItemMessageA
IsZoomed
DefWindowProcA
FillRect
GetSysColorBrush
GetSysColor
RegisterWindowMessageA
DialogBoxParamA
GetMenuStringA
GetSubMenu
GetMenuItemID
GetMenuItemCount
IsWindowEnabled
ExitWindowsEx
RedrawWindow
CallWindowProcA
CheckRadioButton
MapWindowPoints
PtInRect
SetMenu
UpdateWindow
IntersectRect
DefDlgProcA
GetClassLongA
GetMessagePos
FlashWindow
SetMenuDefaultItem
AppendMenuA
DestroyMenu
IsMenu
RemoveMenu
SetMenuItemInfoA
CreatePopupMenu
CreateMenu
SetRect
GetDesktopWindow
GetMenu
DrawIconEx
GetWindow
GetTopWindow
BringWindowToTop
LoadImageA
EnableMenuItem
DestroyWindow
DestroyIcon
ChangeClipboardChain
IsCharAlphaA
AttachThreadInput
WindowFromPoint
GetSystemMetrics
mouse_event
GetKeyNameTextA
GetAsyncKeyState
GetCursorPos
MapVirtualKeyA
VkKeyScanExA
GetKeyboardState
SetKeyboardState
GetWindowTextA
PostQuitMessage
CharUpperA
UnregisterHotKey
RegisterHotKey
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
CallNextHookEx
GetKeyboardLayout
ToAsciiEx
CharLowerA
IsCharAlphaNumericA
IsCharLowerA
IsCharUpperA
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardFormatNameA
GetClipboardData
CloseClipboard
FindWindowA
PostMessageA
SetTimer
GetMessageA
GetFocus
GetForegroundWindow
GetWindowThreadProcessId
GetClassNameA
PeekMessageA
GetKeyState
GetWindowLongA
SendMessageA
IsDialogMessageA
ShowWindow
CountClipboardFormats
DrawTextA
AdjustWindowRectEx
SystemParametersInfoA
GetClientRect
MessageBoxA
SendMessageTimeoutA
LoadCursorA
RegisterClassExA
CreateWindowExA
LoadAcceleratorsA
TrackPopupMenuEx
SetClipboardViewer
ScreenToClient
SetWindowLongA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CopyImage
CheckMenuItem
IsWindow
EndDialog
KillTimer
GetDlgCtrlID
GetParent
IsClipboardFormatAvailable
keybd_event
gdi32
ExcludeClipRect
GetClipRgn
FillRgn
SetTextColor
SetBkColor
SetBkMode
GetObjectA
EnumFontFamiliesExA
GetClipBox
CreateCompatibleBitmap
BitBlt
GetPixel
CreateCompatibleDC
GetDIBits
GetSystemPaletteEntries
CreateEllipticRgn
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
CreateSolidBrush
CreateDCA
GetDeviceCaps
GetStockObject
SelectObject
GetTextFaceA
GetTextMetricsA
CreateFontA
DeleteObject
DeleteDC
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenSCManagerA
LockServiceDatabase
UnlockServiceDatabase
CloseServiceHandle
GetUserNameA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegCloseKey
RegConnectRegistryA
shell32
DragQueryPoint
SHFileOperationA
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA
Shell_NotifyIconA
DragQueryFileA
DragFinish
ExtractIconA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
Sections
.text Size: 354KB - Virtual size: 353KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ