Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
cb2de216a16266ffc0c031750d652917_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cb2de216a16266ffc0c031750d652917_JaffaCakes118
-
Size
717KB
-
MD5
cb2de216a16266ffc0c031750d652917
-
SHA1
cd8fd54cf6fef6910200103d586e1f3f6b22dff1
-
SHA256
02c0e50dd577fe7727f4c050bee9d9d260021839d8b7798e77d289264ad59b66
-
SHA512
0ebf884745b3def76a55f771d28bdc71d98264e91167bb5974d505cc497608a3ff769229ed67705f6dfd24b2973c0fdc3c38927c574569bf28d8556f54de43b6
-
SSDEEP
12288:r5g1NPZi5cwyFpl900fIMel0RtAdWFdFv+JS1Zu6v/WLVa5TFp:r5GZi5Yk0Q74t6WFnM6vDTF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb2de216a16266ffc0c031750d652917_JaffaCakes118
Files
-
cb2de216a16266ffc0c031750d652917_JaffaCakes118.exe windows:4 windows x86 arch:x86
9567c56fa60cdec1ba52693c2fdab272
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryW
Sections
Size: 49KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdyohlcm Size: 652KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fwwfdisx Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE