Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
eab2e8e0fbdaff8a50b259dd121b3de0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eab2e8e0fbdaff8a50b259dd121b3de0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eab2e8e0fbdaff8a50b259dd121b3de0_JaffaCakes118
-
Size
40KB
-
MD5
eab2e8e0fbdaff8a50b259dd121b3de0
-
SHA1
e125cc97760b035b935dc8282e3b19d6b3698ba3
-
SHA256
5109590958f3b7da0585d3c40728cf04793968bf152c08fc924fb95455737dbe
-
SHA512
bdedde0a02109cd431fb05c7f5b736318365a72d7ec61bbf1c8c668bcba168018a9dfe57af2d6df0ef786bc7f295586eaa43a21b71e1831c2692e7978192b574
-
SSDEEP
768:jpZ4CFvKxXwf07hVvJwZSqoEAhS0CezvhCHgYsh0GFgliMub7cX:hpKLJwZSSAhS136SS1a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eab2e8e0fbdaff8a50b259dd121b3de0_JaffaCakes118
Files
-
eab2e8e0fbdaff8a50b259dd121b3de0_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 27KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE