Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
5b170c7b8d61630f24f4770813de528d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b170c7b8d61630f24f4770813de528d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b170c7b8d61630f24f4770813de528d_JaffaCakes118
-
Size
369KB
-
MD5
5b170c7b8d61630f24f4770813de528d
-
SHA1
4a70f8afc53c5da2a8440d01b3774a0f1b20bd21
-
SHA256
d8ab7a683844737423d19278b867628dbb80b870f9d768efa8fa2f9b04fb352b
-
SHA512
0b31422836d3b3c7ad0caec4d91d747f45423920826109a373931feb683811f49b601f0563c19eddcdd9901fa444b7a425a2d5d55b5435cb53f9f78b8337b5a8
-
SSDEEP
6144:r49nHjl8/Q7agtGCRUNKmHNtSOI0sJ5RPqkZvoIXDDUkHVgxb6dq8/BxjH0H:r4lHF77PRUIGNtyJvouDUkHVg96k6xj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b170c7b8d61630f24f4770813de528d_JaffaCakes118
Files
-
5b170c7b8d61630f24f4770813de528d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 367KB - Virtual size: 367KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ