Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
fd09d5e1c123679da1540cb1767485eb_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
fd09d5e1c123679da1540cb1767485eb_JaffaCakes118
-
Size
536KB
-
MD5
fd09d5e1c123679da1540cb1767485eb
-
SHA1
afeae2a8f28134652391bbbefcb6f32794878c93
-
SHA256
eafd18fe0c6c0dea1e61926bd474dfddd834b137ccf59434df09958101b8320b
-
SHA512
d56628de3d3854c54e9a279dff51c2b30efa3761839baae397453307aeb696a8ea9d4845e33255687525bd9a38f0838d0eb77104105235fda9aa9e398380ff77
-
SSDEEP
12288:Bb6l7UYuch9wpfK1AyDNvJmhl407aHEWrtICWUY8yPQ30tu7:p87IXpy1AudJUkRrPWUgPTG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd09d5e1c123679da1540cb1767485eb_JaffaCakes118
Files
-
fd09d5e1c123679da1540cb1767485eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ