Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
b4988d8f11dac34fc9c954b20f31ed74_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b4988d8f11dac34fc9c954b20f31ed74_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
b4988d8f11dac34fc9c954b20f31ed74_JaffaCakes118
-
Size
46KB
-
MD5
b4988d8f11dac34fc9c954b20f31ed74
-
SHA1
5c67c51d41e00af98bafcd0ff88557efdaecb461
-
SHA256
cc34c1bb8def74303730293e207599946149d9193100f76982b7a533c1dfaf7b
-
SHA512
6ad6f3205e0c3e3f6fa96ab5cdb13f3d9e9c04773845c853513cbaf3968db62e7a340c7c4f4c9a498ea3941507396e33ab6a33d78b40c63bad709398390912d2
-
SSDEEP
768:b/JHBxlxnwxwlnEe8CYZvyGRd34ZXSvZDnPDVTkLXc2va4mIorC/BJyq++EqiPxC:bvxTywOCYZ6GRd3aXSvdDxkLs14Fo2/v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b4988d8f11dac34fc9c954b20f31ed74_JaffaCakes118 unpack001/out.upx
Files
-
b4988d8f11dac34fc9c954b20f31ed74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ