Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_60639c4af77fcf21bf20fbefb3142eec.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_60639c4af77fcf21bf20fbefb3142eec
-
Size
234KB
-
MD5
60639c4af77fcf21bf20fbefb3142eec
-
SHA1
73dde4fc639c9ec2c42520abaa456e99ccb4badc
-
SHA256
33672666a53edab174939f0484c0cd59dc627ff56f8a2907412ba0b616e7a74a
-
SHA512
7c0c1555ab8dcf2c999f46f09091123bd3fe0da2d5971fe9c7280e53037cfa004185278a532380c0617dc1b6c3188b201432e0248ec1ff3a47458bfb69f287f5
-
SSDEEP
6144:aE1bwNNeYIJM1/9p3miMIUq4VVnlHicTMx2EPBCJ:ixhmiMtqCVlr+JCJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_60639c4af77fcf21bf20fbefb3142eec
Files
-
JaffaCakes118_60639c4af77fcf21bf20fbefb3142eec.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE