Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
f3398df0b63270dd9745eea3ccad5219_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f3398df0b63270dd9745eea3ccad5219_JaffaCakes118
-
Size
2.6MB
-
MD5
f3398df0b63270dd9745eea3ccad5219
-
SHA1
77f8ee1929607a5547da025f0e5d05832253b1f9
-
SHA256
4e8f11c8de947c2df0b77a6bd2e42c2f445f93b21c79d082acfc3590785501d5
-
SHA512
f32e29e3144442a59c487385821cb5b97f487514295d72ae3d622d815b2fc90c713cbd91464afd9ea51f85bf9e631f43c6350dd0745d2518eae96ec94961d358
-
SSDEEP
49152:q4c9NKDNgTbnp+iD5CzGgveqWxvdLWzEjNlqmPJew7QDCrN4H6vB:cjKhgTIiVvgvbad7jNlqm9bmH6v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3398df0b63270dd9745eea3ccad5219_JaffaCakes118
Files
-
f3398df0b63270dd9745eea3ccad5219_JaffaCakes118.exe windows:4 windows x86 arch:x86
f263b984eed26508357900f6691515a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FindClose
Sections
Size: 314KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oyfcwkby Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zrgxtzqb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE