Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d392ac090591df46727a9fa8b8988e14_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d392ac090591df46727a9fa8b8988e14_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d392ac090591df46727a9fa8b8988e14_JaffaCakes118
-
Size
154KB
-
MD5
d392ac090591df46727a9fa8b8988e14
-
SHA1
16e07eae431abd76dc7e4fd1a5ffb1a16701e3a5
-
SHA256
f5d16e0ce939d7a58fe58500015320c962abca9f188e4d48503a67db858adb67
-
SHA512
92da8420045b92ca6edff8f93db947ec43f09911f6b05ebe6cbd7d087e2e6dac527e8a29fd9d2c00bf57c0ae52bf2afa4e13054b6a430bdaa739428e1e9f9c67
-
SSDEEP
3072:WyehhK/H/wwmUnAntBnYnGLx11/WiN01/Kv:yhcfowGuG/1/WiN5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d392ac090591df46727a9fa8b8988e14_JaffaCakes118
Files
-
d392ac090591df46727a9fa8b8988e14_JaffaCakes118.exe windows:4 windows x86 arch:x86
879ac25ef612140e0e1733436e748a59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
SetCurrentDirectoryA
IsDebuggerPresent
LoadLibraryA
ExitProcess
GetProcAddress
VirtualProtect
msvcrt
__CxxFrameHandler
??2@YAPAXI@Z
memset
memcpy
??3@YAXPAX@Z
Sections
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ