Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
67f2782ba2ce4e57cd1248d81d4c58b7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67f2782ba2ce4e57cd1248d81d4c58b7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67f2782ba2ce4e57cd1248d81d4c58b7_JaffaCakes118
-
Size
62KB
-
MD5
67f2782ba2ce4e57cd1248d81d4c58b7
-
SHA1
1f376a4b0e00e005d8d29ff5c6dd938e666c737b
-
SHA256
933b46cc1bc5a0dbecc95ec3f24a605b259ae90b9ae25ebf69f505d2420014ec
-
SHA512
74e946b9ab599d20c017178d8b18668e9b4b52b860c26edc94ab21e375da2bd966e72e5a06200d99172f0e1230927aba145660300f2aa45c0acca47dfda06f72
-
SSDEEP
1536:Ek8LxESTTTzxF4cqsVEaijGjT6aow+CkCTAtv:EJEg73t6MTVH+3Zv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67f2782ba2ce4e57cd1248d81d4c58b7_JaffaCakes118
Files
-
67f2782ba2ce4e57cd1248d81d4c58b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ