Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
b674f8e505e7b61046f6868f113ec02c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
b674f8e505e7b61046f6868f113ec02c_JaffaCakes118
-
Size
911KB
-
MD5
b674f8e505e7b61046f6868f113ec02c
-
SHA1
84d59c311e93bc743943546a2007f4e446fac5ca
-
SHA256
28dcb2f5db406f8321cab518f51b9d1b90c716f8e4064fd403bac65756959265
-
SHA512
d896c482bad1b7d516d75dcea620d93413606bf009cb1fea8c1d107b777e80cd93eb738deeee6e0e88e2d8cabf1e20c6b4936a74f65d3e645623628d5e29ad8d
-
SSDEEP
24576:vB9qNybpvPZevYdWSeDD36Shu+eprZzehAM:vXqNyb52YdGD3eFJAb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b674f8e505e7b61046f6868f113ec02c_JaffaCakes118
Files
-
b674f8e505e7b61046f6868f113ec02c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 308KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ