Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d03fca4da489a5254d73c05a87daefa5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d03fca4da489a5254d73c05a87daefa5_JaffaCakes118
-
Size
294KB
-
MD5
d03fca4da489a5254d73c05a87daefa5
-
SHA1
acc9984e1e8544966bf3703717781c5eb286f23e
-
SHA256
e7e91b96152faa1d08c037da177b7a45d3423688db2c6f30a74d4d473ae1d54c
-
SHA512
4ed24fe8296c280b427d346a2d110c5c7747c7f230e1cc110bd4eb41aba5ba76fd7d3128f3f012c009c87d0d3332c0b4585cafbf91cd2de6ee463bda1c48b4d9
-
SSDEEP
6144:y4XjZEMfH0MYXhrynDPIP9GlmBcPxunGw7MgyZdi3QTFaTy//V:y4XFEuUMYxrSDPI1ymBoYYgyPi3s7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d03fca4da489a5254d73c05a87daefa5_JaffaCakes118
Files
-
d03fca4da489a5254d73c05a87daefa5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 721B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE