Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
f887b8113986c093b5aaa161413db5f6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f887b8113986c093b5aaa161413db5f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f887b8113986c093b5aaa161413db5f6_JaffaCakes118
-
Size
150KB
-
MD5
f887b8113986c093b5aaa161413db5f6
-
SHA1
50601d8d1996b5ecdea292bff5dcee3b85ae26d5
-
SHA256
f7caac4912b9c34a9dd0ce99c91899ce6a24d3ded02d0321d21ac85defc46c34
-
SHA512
59555ae0a00b7659aaaa893853d2848147c747d0565e0b23ba3ec5163b547081e10b45489c9b9cbe0e49ed1eed3e3382da4580e9ecbaa453b6367a9cfe1efb45
-
SSDEEP
3072:viGFSUCzK7GBTEhE37TW9PjGL6+eNvPgj5j2dcRWG5IL6exdwjLiT:v5R7WTbrTULGmTdPgFj2d5/JgjLY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f887b8113986c093b5aaa161413db5f6_JaffaCakes118
Files
-
f887b8113986c093b5aaa161413db5f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 904KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE