Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e58fe6d04e8d9fce1020f532d3f0bd49_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e58fe6d04e8d9fce1020f532d3f0bd49_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e58fe6d04e8d9fce1020f532d3f0bd49_JaffaCakes118
-
Size
237KB
-
MD5
e58fe6d04e8d9fce1020f532d3f0bd49
-
SHA1
504dfc0032b65aaf1cd3185da709ce8c9b0daa24
-
SHA256
e60ee107dd301de376b081552a287deb122a6e3b504acb2d9bf925e4b1f2dcf7
-
SHA512
d7665bf5c8843524b11f52f365576d8c55370a144805e6da6dbb17d1074d5d31b8544833509336f9ca07272622a61ce6205b4082a12fe387723c405d267df3cb
-
SSDEEP
6144:F6cPpODxCdS7eOUQ41x2IZrEurubYTvCV+CmdP8nyMI:FVcCIIZIuBTvCVaus
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e58fe6d04e8d9fce1020f532d3f0bd49_JaffaCakes118
Files
-
e58fe6d04e8d9fce1020f532d3f0bd49_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.textbss Size: - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 229KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 497B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ