Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
be295268162c4bde1f31e9413a87f903a419bf743cdbee69db925162c21b7d78.exe
Resource
win7-20240708-en
General
-
Target
JaffaCakes118_b9f16530d1b7ced70644d5677a1209e45d1c2ba79082f95884c820afa07d48f5
-
Size
612KB
-
MD5
58367466bc3e2d9ca54d1eb5dc0af7be
-
SHA1
173941714288f536b22b71111c9a4325da711b1a
-
SHA256
b9f16530d1b7ced70644d5677a1209e45d1c2ba79082f95884c820afa07d48f5
-
SHA512
477823bd6dafbd731310fa18c60534612acf4b9856e04bab065fb6f7a253254da76547265aa827a23bf1f8812c41bde1b5e7d21a085943a8c8e8c0759786052a
-
SSDEEP
12288:9m9xQfKs63+b62Hu1R/pec9S5LFh1E3ss4H7B14wPmKPJEHJw6HPa/Hj:kkfKs6uYc8GW3tEB1EKxs9HQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/be295268162c4bde1f31e9413a87f903a419bf743cdbee69db925162c21b7d78
Files
-
JaffaCakes118_b9f16530d1b7ced70644d5677a1209e45d1c2ba79082f95884c820afa07d48f5.zip
Password: infected
-
be295268162c4bde1f31e9413a87f903a419bf743cdbee69db925162c21b7d78.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 773KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ