Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
91c2e0359815c6bd159e7de7d249844f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
91c2e0359815c6bd159e7de7d249844f_JaffaCakes118
-
Size
1.0MB
-
MD5
91c2e0359815c6bd159e7de7d249844f
-
SHA1
fba9892e9236c504edcb25aafcee549c007f5b09
-
SHA256
1211cd46ae633efd8f104fc7c7c93757457139a06e90e1a09444e13671fd7af8
-
SHA512
7157f495802ad458f3b2edbcb01ca4e1e38f96acc8437dfac235d4e9d7b72550d5ca11ebba798f549a6badee6088a20093bc5759d7142dabb035ed0cac6ac2ca
-
SSDEEP
24576:aEboxRri1tRZmUxUUx8eGW8S4tB+8bkLPzwyJ8xAmEKju:aRRGfmUP2SAB+8phec
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91c2e0359815c6bd159e7de7d249844f_JaffaCakes118
Files
-
91c2e0359815c6bd159e7de7d249844f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 312KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 671KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE