Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
Copia de transferencia bancaria.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_fdb292d797f2e82375becab7d1e33d1d5f2b51ea00b133565ebfc2e8d7c7cf76
-
Size
778KB
-
MD5
f8e1c01b3de818ea80c2015fa66b1fd3
-
SHA1
4c75119c3492c4efed2f8b97e334f56bc0e8f7ec
-
SHA256
fdb292d797f2e82375becab7d1e33d1d5f2b51ea00b133565ebfc2e8d7c7cf76
-
SHA512
4d97956b1bbe2b5b78035e172c399acd55f5e7691e6006033752e7d41ba52865cfbde26b2be8fd198f5fdaa90e6939e64109d8617fd3d500eaaf09ba4b4f9448
-
SSDEEP
24576:kKzcAQiwM1jogvgjHCFC8K3B3gT5X+mypAfF2g6HGQx:PMiwbgvgjH93ZgTwmTfZ6HDx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Copia de transferencia bancaria.exe
Files
-
JaffaCakes118_fdb292d797f2e82375becab7d1e33d1d5f2b51ea00b133565ebfc2e8d7c7cf76.zip
Password: infected
-
Copia de transferencia bancaria.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 969KB - Virtual size: 969KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ