Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
b72644d7b2cdb11fa41c4b7947b7582f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
b72644d7b2cdb11fa41c4b7947b7582f_JaffaCakes118
-
Size
2.9MB
-
MD5
b72644d7b2cdb11fa41c4b7947b7582f
-
SHA1
044f1776ef4f83802afdc60780880d93f4f28ee1
-
SHA256
a7c5656d425825b9d1e0744c94db8273c54d6515b44bfc83df5276352d9ff449
-
SHA512
ccac064699179aaa7828895929df582046a0449d1a1c2b61c31178ab3c8d5a6d58191bfa341771161bfeb66d4dad58908690d4eab62c297b23e3e62b2ca14f30
-
SSDEEP
49152:vQ/wFmaeCj/E24Zcyks4emAZXImb7EZw9Baj8BBT4SfcsUjoh48TyMPkXdwkyZ:vriCj/ckj3U6SHau42c1joCjMPkNwk6
Malware Config
Extracted
gozi
Signatures
Files
-
b72644d7b2cdb11fa41c4b7947b7582f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE