Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e6236914bbeeb78a29c83c725566eecf_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
e6236914bbeeb78a29c83c725566eecf_JaffaCakes118
-
Size
560KB
-
MD5
e6236914bbeeb78a29c83c725566eecf
-
SHA1
d68194ce6b1c2e602315402b702a9550e9d80920
-
SHA256
b27d82ca7fbe602e095cfb590c472b346b0e4d914a167235be96d00c66041b62
-
SHA512
6b787725e0e31f9d8b26a0f6a6fbebe0de1ae05e7e856cf5717633b2b65baf9b433c7a9b9ea509e115c4c3304b4ea4f80bbff011f727136b7ca49f14f14e642c
-
SSDEEP
12288:1bjvk+D+RyXz6hGJHwBndcOX1BqNxpWdbN8u6SxzwxamzKGUoaen:VE4wvVqSbD9uamzvUoX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e6236914bbeeb78a29c83c725566eecf_JaffaCakes118
Files
-
e6236914bbeeb78a29c83c725566eecf_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 557KB - Virtual size: 557KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ