Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
21 de agosto Nueva solicitud de cotización.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_2fad0c1405a98d28710bc60f6c698f67551eb8ac82159809c63c954186f1b831
-
Size
687KB
-
MD5
4facf5769627a367d3a02a6298a7a36f
-
SHA1
12e940a8743953e101b7b807e892a888535dbc07
-
SHA256
2fad0c1405a98d28710bc60f6c698f67551eb8ac82159809c63c954186f1b831
-
SHA512
091b5258ea6ecc63d54de3a73aa1de6949e77b45320f7951f2fa26de2c1e9399ee483a6204a0b05433f52218e42dc72445b47a5946091c3303c812af95a05b83
-
SSDEEP
12288:gSbL/NYalWaAgyEa8dIwFeRT+5zHNDEszaBNRzvesTn6k3wodR2s4ZzRzAmDIBsX:gStFqgS8dIseRTMztDdiRLsKwodR4Zlh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/21 de agosto Nueva solicitud de cotización.bat
Files
-
JaffaCakes118_2fad0c1405a98d28710bc60f6c698f67551eb8ac82159809c63c954186f1b831.zip
Password: infected
-
4884d3a4f1d8090484fda080670d06873dd58d8361161df62f26753279605145.rar
-
21 de agosto Nueva solicitud de cotización.bat.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 908KB - Virtual size: 907KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ