Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
ecf34a3625a109fbd2feb8b9f03f5e0a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ecf34a3625a109fbd2feb8b9f03f5e0a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ecf34a3625a109fbd2feb8b9f03f5e0a_JaffaCakes118
-
Size
150KB
-
MD5
ecf34a3625a109fbd2feb8b9f03f5e0a
-
SHA1
44ba709400ce61a3919f6522ec1bf58119082663
-
SHA256
a8b699d9cd5339d414000673c7d26fd4ad7e06946d3e7454e852e2d85dec63af
-
SHA512
12d0dbc4bbd98dbff5688dfb9f2bf6aca78be11f4bf663528abb06d5b74f102c76fab81594864cf97604b37ed6d89e3f42e6706d37932689dd7ae5dc30f76f55
-
SSDEEP
3072:4oM56eEbaD+t9OKQ9kTyErxwSSyomXaGSgMPQJ4UskN7uo0:416RE+vO1FyomTSvQGe7ub
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecf34a3625a109fbd2feb8b9f03f5e0a_JaffaCakes118
Files
-
ecf34a3625a109fbd2feb8b9f03f5e0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
e461bb8a6a94d013f35362d96ed158ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
SetCurrentDirectoryA
LoadLibraryA
IsDebuggerPresent
ExitProcess
GetProcAddress
VirtualProtect
msvcrt
__CxxFrameHandler
??2@YAPAXI@Z
memset
memcpy
??3@YAXPAX@Z
Sections
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ