Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
86f193aaf758861c331ca48e9ebba3b1_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
86f193aaf758861c331ca48e9ebba3b1_JaffaCakes118
-
Size
1.2MB
-
MD5
86f193aaf758861c331ca48e9ebba3b1
-
SHA1
bf5bc11347819a2647c49e28f2d52ac17f64081b
-
SHA256
3d73d9137f3b6ce27858fdad0bc0038abe2ed9920e60deda6b571fcf493ef068
-
SHA512
9d65f9553bc3919926836917cfca5858f967bf5e036148d0bd069d7fa404b8639a600b624d80a32e0d0172b25e606b75e69082580930478766ad206ba688eea3
-
SSDEEP
24576:drk1rYb5zdQO0vUL70GvcHRjgOPBoPuQNoCBUodr5eZIyySjEFz27bCHhD/O2YWR:VkqFzkuBIzjFV4YPmtxWBqgIG4
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86f193aaf758861c331ca48e9ebba3b1_JaffaCakes118
Files
-
86f193aaf758861c331ca48e9ebba3b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 498KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE