Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118
-
Size
829KB
-
MD5
b808e1a4f671c7d6b8019b6fd3635a49
-
SHA1
64f2e6701eeca000356704e3716641df7f6fbba1
-
SHA256
94b229b07cffd7dc02f2875e38bfec1d4c4858a709d39afde8809d76318d32d0
-
SHA512
182527b8b3b013f8ef7118a6f5c0143e36f6f3eb42a1b8c69c0f7d580812812aedefb0e4029fce02d8502d5d35de8bae6e0d35e15dd7c35f01a4782ebf106e53
-
SSDEEP
12288:M5bzzJ4eJgd8I5cfWDE0GBoWcG/lKmJ0rJIQOlgsJBw/9fA7OHK4LK0acc:MVfJTJ28a+g4oYlqSQhsJypA8BLK/9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118
Files
-
b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.itext Size: 4KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 527KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ