C:\Users\nosferatus\documents\visual studio 2010\Projects\smss\smss\obj\x86\Release\smss.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
f2d281c405bf737eeac1bfc7761962b9_JaffaCakes118.exe
Resource
win7-20241023-en
General
-
Target
f2d281c405bf737eeac1bfc7761962b9_JaffaCakes118
-
Size
323KB
-
MD5
f2d281c405bf737eeac1bfc7761962b9
-
SHA1
04237b9818d74d67e7a927c6fdc8fe735361efec
-
SHA256
275417a8563bb65f5d0c939618ccbe2ec7c3b544f9b6659701a0b86fd18f2970
-
SHA512
4e32324e53106f8195b3aa2ab291accb01889f267a15efa23d8dc8f3a766433673fe3e9d39075b09a8f1051f15ab0ad81db8c14e746d6efdff101fef66e58c05
-
SSDEEP
6144:UYd377lKPgXUomOZPlmzxAoxhvF4y0dLMrIojbxtrkKrf7ftY5Y+:UYZlmgX5mjVvFSMzjbxhkOSn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2d281c405bf737eeac1bfc7761962b9_JaffaCakes118
Files
-
f2d281c405bf737eeac1bfc7761962b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 145B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 299KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ