Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e371adb18df9145d3b5bbd448b81652e_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
e371adb18df9145d3b5bbd448b81652e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
e371adb18df9145d3b5bbd448b81652e_JaffaCakes118
-
Size
218KB
-
MD5
e371adb18df9145d3b5bbd448b81652e
-
SHA1
aed7868ba4d7e24bdbad1ebc962a0e928dbf5b0c
-
SHA256
0a3c6293b62269a81da4019ad258365b7b5751ccd592e89c4031d031088ffc08
-
SHA512
77994a5b7f9939dbc3f777f0cbc8f36cc681bd2bbdfed889595e97a654a66db6e22a2ead233059b9434d75713876a83260555bd88dac312e7733859724db7c4a
-
SSDEEP
6144:WZQ7/xRY2m4UDnwbFOX53FtrlGnrHDEbQ0+DKVz8fI25XQIWSV://xRDm4UzCFOX53eI3+DKZ/tSV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e371adb18df9145d3b5bbd448b81652e_JaffaCakes118
Files
-
e371adb18df9145d3b5bbd448b81652e_JaffaCakes118.exe windows:5 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 142KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fxjsr39l Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
khhm42p1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
r717wp.5 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ