Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
e556d7813c977fc360cbb52697915334_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e556d7813c977fc360cbb52697915334_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e556d7813c977fc360cbb52697915334_JaffaCakes118
-
Size
480KB
-
MD5
e556d7813c977fc360cbb52697915334
-
SHA1
ad397272fa4e477843392c1483529dae8ba08e52
-
SHA256
4c3f6fd30bd0fbffee37cfe923f1bcc426aacbd76eb393a832466ae2c703b71d
-
SHA512
1a454f2fb909d989122a5b9116234f4a95d819db63e9ee9e445db09b4a9f474cb55cc59d8d198294b2748cfd6a66b73b118a2cea168d6f3e3ea2fcf9e06785c2
-
SSDEEP
6144:VNi0C7+KQ8ISTJ4/FmdYBxT9FzbHc31pLYm4Kf0Y35iZZSHCX61Hs0yqFf42vMJS:biz/IMaNBxa/9iCnCJqxLvf2KnLdx
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e556d7813c977fc360cbb52697915334_JaffaCakes118
Files
-
e556d7813c977fc360cbb52697915334_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 24KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 448KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE