Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_84ea7668b24bdc5a467a707b0a5ee45d.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_84ea7668b24bdc5a467a707b0a5ee45d
-
Size
280KB
-
MD5
84ea7668b24bdc5a467a707b0a5ee45d
-
SHA1
f29e008f0837207dd542099a3aeb335aa973f283
-
SHA256
fc68e2be2dc05d95e4500c0ba773f534a6c914e5cf1b357f1eb59a7d5759385d
-
SHA512
af6eafc874d11d8e3856daacfc25913340087ac1c6923306dae886b902704e43b6a6dd6ed7de806aef970d11572aa18c2b8b9506671e5d8bafd3d5858288b7e6
-
SSDEEP
6144:tM5sN58VIgR54KsA+UZI2hMU9StkcZFHz/FCcW2nWUUU:tMsQVFRKKsNWwUGk2FHMcWlUUU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_84ea7668b24bdc5a467a707b0a5ee45d
Files
-
JaffaCakes118_84ea7668b24bdc5a467a707b0a5ee45d.exe windows:4 windows x86 arch:x86
15c6258c5bce316aa773238f76a12676
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
DeviceIoControl
CreateFileA
GetModuleHandleA
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
VirtualAlloc
GetStringTypeW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
CloseHandle
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
HeapFree
HeapAlloc
LCMapStringA
user32
DialogBoxParamA
SendDlgItemMessageA
EndDialog
SetDlgItemTextA
SetWindowTextA
LoadStringA
MessageBoxA
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 951B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE