Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
c4d4c39497767793776ce76246a930c7_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
c4d4c39497767793776ce76246a930c7_JaffaCakes118
-
Size
397KB
-
MD5
c4d4c39497767793776ce76246a930c7
-
SHA1
d02a8aff5571d7fe0da331db55d4be1dfe2cb3d9
-
SHA256
3a5c5182c1970ba943e86d71e7338bd1e1fe9cd5bf5306820715a4ef21dc6380
-
SHA512
69bfbc64c8c67cb685a0c4b395c1adeaae634b7d875829dba38dc9ceeb0d05aa7def08e518beb955d8122087751fed6342ef4bf260682e74d37deec25fbe8ce3
-
SSDEEP
12288:w4nPzebkjeVSDMMEDp20FbOczk5WPiZc:wGebzVSM9DULsYc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4d4c39497767793776ce76246a930c7_JaffaCakes118
Files
-
c4d4c39497767793776ce76246a930c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
^v2GOU$ Size: 343KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ