Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0361ea7bf3953e04dc3e254a0c1621c8.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_0361ea7bf3953e04dc3e254a0c1621c8
-
Size
100KB
-
MD5
0361ea7bf3953e04dc3e254a0c1621c8
-
SHA1
4a9c7f274e2d8db8eafbbffa21f2e39f4ccc037f
-
SHA256
5087f1a71476879e1fb59b853a4b82b98837c2c12fb7a94d475750f1ab7c462d
-
SHA512
b02ff60230cecb1e01efa1a817f266a438088edbbbeef39e6e9cfdd781b6e66b77139c4bf9b57b6fc5f687dad2daf588278cfcd7bd7ea2f67c2b7db26670cb2d
-
SSDEEP
1536:XHus0x0uth4VmXDC3TmkjQIqz7CBhWcqr1rnLhMjSgn3gkQvMIN:3P0x04SP35jQDCB+M53gkQku
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0361ea7bf3953e04dc3e254a0c1621c8
Files
-
JaffaCakes118_0361ea7bf3953e04dc3e254a0c1621c8.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE