Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
81a4a7fb963b4d76f049950c9e1c9436_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
81a4a7fb963b4d76f049950c9e1c9436_JaffaCakes118
-
Size
14KB
-
MD5
81a4a7fb963b4d76f049950c9e1c9436
-
SHA1
5583e6a8814c51bc31ebba67927bb7c91a78b5ae
-
SHA256
dc64440ec95ba3a1da5624f5357b2dcdc52a4734102b134e82013efb1559a9df
-
SHA512
2e30584a723340b1321a2147a0f787a0dfbb3df60473fe8ec9778f73e3d737c46eee3eca14b55e746b8653cd1c6b87ee130db953db57a00a4931981f778755ea
-
SSDEEP
192://1LS3XMWP0/T7t8KAtDfDyLn9mfO9H52GicySxOs7:1em/T7t8KQPKIO9HEGicpxO+
Malware Config
Signatures
Files
-
81a4a7fb963b4d76f049950c9e1c9436_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ