Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
eab50ae6acf75ec9d3b1f6183d222917_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
eab50ae6acf75ec9d3b1f6183d222917_JaffaCakes118
-
Size
784KB
-
MD5
eab50ae6acf75ec9d3b1f6183d222917
-
SHA1
bd3c78790bf7bdf49b7d2b7af0774b8b22fa520f
-
SHA256
07835cac7e7002e88a4cb2d5d09eb50dc732b8e99741f4a7f89da4d68bf2c805
-
SHA512
c604a17e3f53d828c2d93d88056a920776715ee6f8da791db2a63f5e6786598752761d9381ce2f7a56ed1738fde9e5a44647e3a1d979da7d0a1ba8a38f234ce7
-
SSDEEP
12288:cq53R04dORjSG8cPQa7d2Hvj67W39+gPHvtAKVWbcdq5tldcN+6AqcVuKMD6ZPob:7RvkRuBLAE+638gPfcD+8/HK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eab50ae6acf75ec9d3b1f6183d222917_JaffaCakes118
Files
-
eab50ae6acf75ec9d3b1f6183d222917_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE