Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_82b3bcede25840607541cedc361e81c9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_82b3bcede25840607541cedc361e81c9.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_82b3bcede25840607541cedc361e81c9
-
Size
412KB
-
MD5
82b3bcede25840607541cedc361e81c9
-
SHA1
2364b012328bf168c6e03ca3b2f28267b5f5a750
-
SHA256
c46409852731886450685127a9363057cb23b18691f967a8cee0bfe1ca5db709
-
SHA512
5d24b342c4a03bc1bca2665b18c2e362a4c1d54f285958b9a0b504e53ba111e255351ce65d98d2037dfeb5b22e437f5d14bc65c42d643314b690d56d544afd5f
-
SSDEEP
12288:7uYiDjPSkk1KyPX4e18DDkYDMg5BkYxg8XkU4Da:7GSkwckYD/BR4Da
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_82b3bcede25840607541cedc361e81c9
Files
-
JaffaCakes118_82b3bcede25840607541cedc361e81c9.exe windows:4 windows x86 arch:x86
93ba2a8cc233cd1969707074da61d863
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
advapi32
RegOpenKeyExA
Sections
Size: - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE