Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
f3b7bd82730d8d914777b0b0680159c4_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f3b7bd82730d8d914777b0b0680159c4_JaffaCakes118
-
Size
286KB
-
MD5
f3b7bd82730d8d914777b0b0680159c4
-
SHA1
1d7a050b4b649cd28a13e2721d40ef114164591e
-
SHA256
185393af8266580c1f895e58b20e416ad6f30a6f45898eaa66917acd180efc6f
-
SHA512
103dd65c9d6ceb390d4936b1cc2dc57008e2337c41443c0feb118f38d491a52c842ca433ee2dc2ebf7d089c054ac8812394c6e40212cb2159bf0870e23683fc4
-
SSDEEP
6144:U08G+S3z1CPtQUwa59gYfZdBFQ1IBDPLIz27RBeOrCeQ3Tq5P1urPG:pj+oQWUw9YfZdBFQ1IVjIz2FtuG54+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3b7bd82730d8d914777b0b0680159c4_JaffaCakes118
Files
-
f3b7bd82730d8d914777b0b0680159c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE