Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_55bf2bbdd87ec3ac709c6a247f4a28b4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_55bf2bbdd87ec3ac709c6a247f4a28b4.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_55bf2bbdd87ec3ac709c6a247f4a28b4
-
Size
29KB
-
MD5
55bf2bbdd87ec3ac709c6a247f4a28b4
-
SHA1
6df7d9af3a7b2da1c91aff955a4c5aadbe2d13cb
-
SHA256
89a0227ef833a2742f7dd46be36e61b178a8b47846fd3cf557c8b9991b7cfb67
-
SHA512
dcaa8ab6b31105a3ec82454008cd4835a1728ccb6fceee8ae89ce4198a0555a72ed9345a6acb0d9c80dcaa40608483f13bb35a255e832e01a6ea1bd463439aa2
-
SSDEEP
768:BAGygotBbsWyj5bVotP1DbUBLnW3xLfflPi5wiw:BAGnsbq1bkP1DbUl0FD1
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_55bf2bbdd87ec3ac709c6a247f4a28b4
Files
-
JaffaCakes118_55bf2bbdd87ec3ac709c6a247f4a28b4.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE