Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
fee154fb991f86e1014ff9fe0cfbdb4e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fee154fb991f86e1014ff9fe0cfbdb4e_JaffaCakes118
-
Size
258KB
-
MD5
fee154fb991f86e1014ff9fe0cfbdb4e
-
SHA1
eecd3f1407807a7ab7aa3bc1af10d68130951872
-
SHA256
2eed57f84f11f3010c599ef33641bf20737c5eead4798587439c166e7229acbd
-
SHA512
1b4aded3944ed7095c3170ef5b28c66f1796a51b8a7a9faf5ef617d144f74ab62a5d4420077e1d0b9e98cd1d0ca664b55ee952094e7c951ab1b63237ae8d5236
-
SSDEEP
3072:vBH9kXjExB4E55mi2nb0Wlj1ing/rwnxwt6r1hROCfUUXXenG5Kzgegp6CBNmQMW:YVo5Mo+0ngcnxX15enjCXk0EG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fee154fb991f86e1014ff9fe0cfbdb4e_JaffaCakes118
Files
-
fee154fb991f86e1014ff9fe0cfbdb4e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE