Gaaff874ff7ff71Gaaff874ff7ff71Gaaff874ff7ff71Gaaff874ff7ff71Gaaff874ff7ff71Gaaff874ff7ff71Gaaff874ff7ff71Gaaff874ff7ff71
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0b24025d16b48d54c8b672b0d5d67bb0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_0b24025d16b48d54c8b672b0d5d67bb0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_0b24025d16b48d54c8b672b0d5d67bb0
-
Size
309KB
-
MD5
0b24025d16b48d54c8b672b0d5d67bb0
-
SHA1
08c0891c34a3cc15c81e4b5fa2a082ba2be5d757
-
SHA256
f5213e3bfc3891b97bfbde5a135b97806c848753f334b06adb61f14f6fda836e
-
SHA512
ba42105588fcc3dfe8215abd0f2c60ecafc319358712b380b0e44b9369f1cb48df9c22e6490061316f5d5f6923c0893a57bce321af6ff4ab3f38d0ec530f6a7d
-
SSDEEP
6144:caFu5M5yxrMLebcTaXRd8L2wPnhYrPKwSTVGKvcq89znBL:zFcBbc8ivhTuqgnBL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0b24025d16b48d54c8b672b0d5d67bb0
Files
-
JaffaCakes118_0b24025d16b48d54c8b672b0d5d67bb0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
. Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: 512B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 870B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ