Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
3825efd5fcbdde5bd2a250c08d335c91_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3825efd5fcbdde5bd2a250c08d335c91_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3825efd5fcbdde5bd2a250c08d335c91_JaffaCakes118
-
Size
512KB
-
MD5
3825efd5fcbdde5bd2a250c08d335c91
-
SHA1
8337c955226c5568fb81a5cba795ddb34b86ce77
-
SHA256
782b974af31ff9999e5449f9a675ea18d97d26456a277327b1e492c539e14ece
-
SHA512
caa5274799517e73e96f1ffd089a7797f9fda4b5df34a9ba634fb13bc685ab68733c80594a01d239490d9768f4e7f9ac88f8be24dc540a0032b8657d53cc2c36
-
SSDEEP
3072:Z9VkLyI8bS7A7WGAXLKEHpImmRxOt47AEsEUgOqWr6:fWN8bS7rjXWEJImmRQ27ADE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3825efd5fcbdde5bd2a250c08d335c91_JaffaCakes118
Files
-
3825efd5fcbdde5bd2a250c08d335c91_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 364KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ