Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8e5e00bf63a2383e74225bfc1a7e59d1.exe
Resource
win7-20250207-en
General
-
Target
JaffaCakes118_8e5e00bf63a2383e74225bfc1a7e59d1
-
Size
97KB
-
MD5
8e5e00bf63a2383e74225bfc1a7e59d1
-
SHA1
3fe1b3c845692d30d7a57b346d0803e318ad23b7
-
SHA256
1398d573a2723e7b07f94207ce1276afe47c9bd350e8ed3b7d995fca64d2accf
-
SHA512
05bf83b753bf7da9f7516c99ff4c7ae9bd6b3de903e84cfec731b0ccbfca52b37b74b17a09f18dafc732623abcc03d6fcd0e076cde8f1d125af883db50b15335
-
SSDEEP
1536:jWZEb/e8NVRqwp2IOeLo1rx7UPufeMsRXV+DlYwROVDWUMILMXN6Xh:jWZyRqwpl9LUrpepXV8lkqxGMXMXh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_8e5e00bf63a2383e74225bfc1a7e59d1
Files
-
JaffaCakes118_8e5e00bf63a2383e74225bfc1a7e59d1.exe windows:4 windows x86 arch:x86
be5dd5ba2e82a9dc22b04debc4b15080
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetSystemInfo
FindClose
GetStringTypeW
lstrcpynW
MultiByteToWideChar
GetProcAddress
VirtualAlloc
GetLocaleInfoA
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GlobalSize
LCMapStringW
GetStringTypeA
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
VirtualProtect
user32
EndDeferWindowPos
LoadCursorW
LoadMenuW
gdi32
CreateCompatibleBitmap
SetTextColor
comdlg32
ChooseColorA
ChooseColorW
FindTextW
advapi32
RegDeleteKeyA
RegQueryValueExW
RegDeleteValueW
ole32
OleDuplicateData
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ