Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_b1555ce1ddf250a9ad78542e86de7e57.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_b1555ce1ddf250a9ad78542e86de7e57
-
Size
330KB
-
MD5
b1555ce1ddf250a9ad78542e86de7e57
-
SHA1
0f9157a6c194ecf86d99f96900c0d77c2575ba23
-
SHA256
20173bc4386d4322d03c810acb0fdea76fa42d06e28d70edd21e053bedd522ff
-
SHA512
494041e22b2519b8e77bee565599304aa3790e30a6e64a6e382fa5af21cd2a40713cf3fa8735161646e88880210b05dde0c8d3ef734335116e4610d7b0e0872f
-
SSDEEP
6144:yEV8r8IFZNhc23rLD1cAA25JtUVpwi03gI/qBisAqw:yLH02bLD1cl25JtUi/qBiND
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b1555ce1ddf250a9ad78542e86de7e57
Files
-
JaffaCakes118_b1555ce1ddf250a9ad78542e86de7e57.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_.rsrc.- Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE