Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e61692f8875d714c029cbdceed785b79_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e61692f8875d714c029cbdceed785b79_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e61692f8875d714c029cbdceed785b79_JaffaCakes118
-
Size
13KB
-
MD5
e61692f8875d714c029cbdceed785b79
-
SHA1
4676b54b2a84155d542f51ca56afe7d6d5316b25
-
SHA256
144aa7e6d9b2b100178cec70b9b335b7c1cc5d7407782955b8d643d20b458826
-
SHA512
a1df31a5f0ce7793b5625716ef1dd1101f647a0c2b35154142c4910a433c41cc019cfdfe462a90ae2f01ba58ef091e6ff845d3c12a9c8f3da4f9246eb28b00b7
-
SSDEEP
192:4TA0M7TKm1Nj4BW6Z/VpBRpUzT+xja6WTc6iWPVpvCH4kaZPMAKHeSQFP99qI9Q8:4YTKqEBDZRuz/YikAKHe7yI/7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e61692f8875d714c029cbdceed785b79_JaffaCakes118
Files
-
e61692f8875d714c029cbdceed785b79_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 84KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA