Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6ce642a5f5b85d4413e5d5208ef63bb0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6ce642a5f5b85d4413e5d5208ef63bb0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6ce642a5f5b85d4413e5d5208ef63bb0
-
Size
252KB
-
MD5
6ce642a5f5b85d4413e5d5208ef63bb0
-
SHA1
d5cb29d0ee8a79d0cac7fb7c3f931ff1ef9dfe8d
-
SHA256
128216965909750c3c0d86a972015d4152b56cadfefec98612354fc034c8d437
-
SHA512
0b5ecd7077b6c9e1c6e85fe13cf9ad1677ba03b0802e6c3cac9110bf47d5e30b861e4a22cb65740e7a6f8126ba9e4c909f985323b05744368627a4beb8226422
-
SSDEEP
3072:7x+QMgSXupDSbLiArQm7xf1f1V9oOqKPggd9pcTm5MRplHZs8pHgTvdj2k9Hc3/1:RTSeRSXBf1tHfH9N+Rr55ATvMk96kAD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6ce642a5f5b85d4413e5d5208ef63bb0
Files
-
JaffaCakes118_6ce642a5f5b85d4413e5d5208ef63bb0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ