Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6a71fdc26cdca58920151050696a878c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6a71fdc26cdca58920151050696a878c.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6a71fdc26cdca58920151050696a878c
-
Size
31KB
-
MD5
6a71fdc26cdca58920151050696a878c
-
SHA1
bcecb88fe5b423441f6e1b693192a337205bf689
-
SHA256
b7695ce40866f23064ad3ee9f749ba8e5a19eca2800c164d73b0541aa603332b
-
SHA512
f92f1fbc801a1c34840f7d234cfabe90efac53eff62e39cb320615a9e79d73a9e53702b171cefa5891ef4970169d75a19e5d8abea83f7702f709566372a0f8a1
-
SSDEEP
768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQf2:kZ/nEkh8OTKNL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6a71fdc26cdca58920151050696a878c
Files
-
JaffaCakes118_6a71fdc26cdca58920151050696a878c.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ