Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
RFQ_MOLECOR_14416 URGENTE,pdf.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
RFQ_MOLECOR_14416 URGENTE,pdf.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_0331a099c9af7bb1c89ff82cad81ef5f1a80272706ecb004aca8513d728abe0f
-
Size
364KB
-
MD5
1df1b7570d367ff7473f7e21018bebc6
-
SHA1
b9bc5d7f80e975e1bc0659a73e68d00d953551af
-
SHA256
0331a099c9af7bb1c89ff82cad81ef5f1a80272706ecb004aca8513d728abe0f
-
SHA512
1d8882d1b2ea36e82dfe77a26346553a39699c330e66a7362a8cd69d7570273476321ce482245e3ad5e8f0b674abc8a348829eba1e4ed958721cd1da11a57f3c
-
SSDEEP
6144:SLVr5nWOaFuFznv1PqeopjyhcoSHtFWeOx0ToFTMnhIAOaGxjNqsPjPP:SRRDFznozFOx00FTKCAg9vPjPP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/RFQ_MOLECOR_14416 URGENTE,pdf.exe
Files
-
JaffaCakes118_0331a099c9af7bb1c89ff82cad81ef5f1a80272706ecb004aca8513d728abe0f.zip
Password: infected
-
30a9d87233f437cbce250e82cb07c41669eade2861dfa0e16e154517d453b614.iso
-
out.iso.iso
-
RFQ_MOLECOR_14416 URGENTE,pdf.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 406KB - Virtual size: 405KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ