Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_012767dcb07b7b220efa8082bec90bde.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_012767dcb07b7b220efa8082bec90bde.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_012767dcb07b7b220efa8082bec90bde
-
Size
804KB
-
MD5
012767dcb07b7b220efa8082bec90bde
-
SHA1
7a9b74bf61c6410163e7474e962485250fe0626a
-
SHA256
6450e50e2a6da774c83eb680b644c56b7c9d8b79e48e59fb7b554dbe82f83795
-
SHA512
92c198b7d3d88dec7f15a9a32c54a18f62cca70676602f83acee85e8232e3f988b9cbc28de7e6c36837582d43fe7ba83999a4bd667128ef7ae85dc6ffb170a05
-
SSDEEP
24576:LESZAyEvJAIDtrKbxacFSUH3vv2vvlnBLn+743EBXvL3C:QtxNDtr2lSk3n2vdBLn+743IbC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_012767dcb07b7b220efa8082bec90bde
Files
-
JaffaCakes118_012767dcb07b7b220efa8082bec90bde.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 762KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE