Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7ae0f55f96c886e7d98ccbf9c556f8d5.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_7ae0f55f96c886e7d98ccbf9c556f8d5
-
Size
539KB
-
MD5
7ae0f55f96c886e7d98ccbf9c556f8d5
-
SHA1
f1a575e4e94427c228eb47f881ad44c7de5d8be9
-
SHA256
77299ea0726759ae89c9a070199d887e64ba5e813c34531dfd2a992c7da63642
-
SHA512
c8f6794bdbfab4d22e6b7844fbb98ea63931d62f016d6202f0b33ac2429ed87a7a8c70fe5bfda287044f8b2020ded4cb6baa3ca1a5a19e9a64f4b3c687bd4650
-
SSDEEP
12288:4njgKiW8sTCaUmau2aye94WAVKCHy3u2nSOkH0:4jxR9JuetyKCHoFpk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7ae0f55f96c886e7d98ccbf9c556f8d5
Files
-
JaffaCakes118_7ae0f55f96c886e7d98ccbf9c556f8d5.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 383KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ