Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
fcf4c49153f4756c7b6be27b6ec3fea8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcf4c49153f4756c7b6be27b6ec3fea8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
fcf4c49153f4756c7b6be27b6ec3fea8_JaffaCakes118
-
Size
204KB
-
MD5
fcf4c49153f4756c7b6be27b6ec3fea8
-
SHA1
1ac97fb74610f4e6bdd9bac8fb6b1a67cee5d2e0
-
SHA256
603791ab2625ee3c222c18bdc721d94c443cb431ca0f5a0c4ab9826b1030ae08
-
SHA512
163c29ccf682d9b4be70b2b9a252f6b72bf46d43a99d8a24c447ba5a4b7c983d3a339f5409a43903bcb4096e3040589e677cadee9411b1d31a31a777e2ae2c57
-
SSDEEP
3072:qF0sZ2/7HBr3v+jBZ55U84NFdCfks/vWae+4d80sEw3MhrLxNtu7w/x9wnrC0Dmi:80A2/t+Df0Eh/OaeH9sEwIUcX61b1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcf4c49153f4756c7b6be27b6ec3fea8_JaffaCakes118
Files
-
fcf4c49153f4756c7b6be27b6ec3fea8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
JIK0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JIK1 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE