Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
08e579a367bd345c80c3dd2d28d501af_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
08e579a367bd345c80c3dd2d28d501af_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08e579a367bd345c80c3dd2d28d501af_JaffaCakes118
-
Size
247KB
-
MD5
08e579a367bd345c80c3dd2d28d501af
-
SHA1
06b48d398279b73108478007c26bebce4fdcd115
-
SHA256
a03d411ac798202d63acc18bb582eece1f6cc7eff288210839f7fd1d1079927c
-
SHA512
825f551a824c642cee405d0bcaf273a7e784d359e9d1caffcbbd28243eda5baeaf15f34bc1255c8eabdacfc995fa64fe7ab65f12c0a9196595481893a325bc78
-
SSDEEP
6144:/53OoEydXliRKiyVaQcgsVsJnniQQrzg0sroS:1OonIRKDsQcgsVspniVr8lroS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08e579a367bd345c80c3dd2d28d501af_JaffaCakes118
Files
-
08e579a367bd345c80c3dd2d28d501af_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 404KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 234KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE