C:\Users\Home\AppData\Local\Temp\yqkw0yst.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
a0a5f473b4f39de4552e1053facc5405_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
a0a5f473b4f39de4552e1053facc5405_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
a0a5f473b4f39de4552e1053facc5405_JaffaCakes118
-
Size
180KB
-
MD5
a0a5f473b4f39de4552e1053facc5405
-
SHA1
ebf0180c2529108aff73731c77efe35446128b55
-
SHA256
c41809f94541aa1d2cacfb1bfddb66e05f44dd2726cbcfb80292986c495c4bc3
-
SHA512
c2eb828b0e77b8cfdb05b09943ec55e3aba8c75a31665b9e4ec29fe474f3fc2ffb13adf8a2e12ad4b9e82162073ab54756525660df9cd9217e924931919f0c02
-
SSDEEP
1536:QSznW9QcLLC03InYSGGfbi0qgupw2qdsXFyzD+5DElj:ZzE3LL3YnYNc/q9TUzD+5u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0a5f473b4f39de4552e1053facc5405_JaffaCakes118
Files
-
a0a5f473b4f39de4552e1053facc5405_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 98B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ