Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e06c63e4f48acc302feca4a2289c0701_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
e06c63e4f48acc302feca4a2289c0701_JaffaCakes118
-
Size
100KB
-
MD5
e06c63e4f48acc302feca4a2289c0701
-
SHA1
8462f2ef49d982d07fbb40b941f48c0224b44107
-
SHA256
7a3e3c9f6d8092cc95923916e16ca25a56af1e4e4a9d0523952dabdc43d14943
-
SHA512
bf198f7fa4d68f209e6a4322dca188cdfbcdc7af1c1894e4523a0a67fe50e87903853dc90e29ed742d32a53a14e9dc814a0bc7508829a7fced5bde467b3a47db
-
SSDEEP
1536:gwYe3MD684pSheJ7Yu/DOMHV4cjM+Wogudr6/ydgVsjKMWW1ypWqhEIBiTEksy:g3yMD6HQeJbucjXWoHEFW78rk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e06c63e4f48acc302feca4a2289c0701_JaffaCakes118
Files
-
e06c63e4f48acc302feca4a2289c0701_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE