Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
HLCUJK1200426084 INV 2097430962.DNS.exe
Resource
win7-20240708-en
General
-
Target
c256cbd591c1e36efd697501a5737056_JaffaCakes118
-
Size
303KB
-
MD5
c256cbd591c1e36efd697501a5737056
-
SHA1
a79ff7fe5052a52e04153a7a86b553de6aaec793
-
SHA256
4256c11a396ac144b03ba3dd5bed252f3d89ec68baf892df78a0420ced0cc01c
-
SHA512
64225d10c3c13d5f4642f35cb2a5d58195c6556d36f32590d981766072e2ce1f97d3d4d1fe3eb699cd1feb2b0b96dba7715f4c63ff3473fe39fb74b855e30514
-
SSDEEP
6144:D8XoRHg1/2R/6sZ/OmQp0rT8UMvJz3/Ittmkbe9YfV0Udmemw+a0kPoizNBNULRg:DR61GOmV7+/QMI9+UdmLa0kPoiz2LRsL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HLCUJK1200426084 INV 2097430962.DNS.exe
Files
-
c256cbd591c1e36efd697501a5737056_JaffaCakes118.zip
-
HLCUJK1200426084 INV 2097430962.DNS.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 339KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ