Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
76c090f1bbc12453b6046736daa7009b_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
76c090f1bbc12453b6046736daa7009b_JaffaCakes118
-
Size
222KB
-
MD5
76c090f1bbc12453b6046736daa7009b
-
SHA1
d18483537a06195adae4376b66ebb992fa4f39be
-
SHA256
15be0713bcd6b6c3ca2ca062a711fb979bdd00194dacf9635cf84ee69ad5854d
-
SHA512
fe33ed15e6b13ad0e45222324ba75ebed11e6198427e2edd93d9ba7160b224f26e8062c0bdc3e8caff371e1a96940eae1c358da32aab9c819ce6559970194786
-
SSDEEP
3072:3hvsRJUV7ZdyQod/TGEMVmoEzlWln9b4ct+bIF6LjFkF3karC1t1TB1Me6i9E:RvHT/GMdExW96ctdcL+F3karCJFGe6k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76c090f1bbc12453b6046736daa7009b_JaffaCakes118
Files
-
76c090f1bbc12453b6046736daa7009b_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ