Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_449ef8f2a323a7f4ba25f7d422a68bb0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_449ef8f2a323a7f4ba25f7d422a68bb0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_449ef8f2a323a7f4ba25f7d422a68bb0
-
Size
169KB
-
MD5
449ef8f2a323a7f4ba25f7d422a68bb0
-
SHA1
27b92f49361abd418c6ac26c607fff4b7db100f9
-
SHA256
7113d9d30f7fadeaaf2e033c24bc0c447661ba8efcef10e8886bbc42ba3b7515
-
SHA512
2289da02e753b8a061b84be4814c196a04f3a3b0d076634082dbf9d83af5424d2f021e2a7ef0367d6124a2f92c5d222e9a6174049923ec6cf1a6f85dd2911383
-
SSDEEP
3072:oKzoFqWwkXoXOmQjPXHnbHWrAKyqt0Ixo+NWRURNRoI4dTRfZauHLHZw1:o8oFqW7G8jPXHzKA9qt0I++N1boIwTRK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_449ef8f2a323a7f4ba25f7d422a68bb0
Files
-
JaffaCakes118_449ef8f2a323a7f4ba25f7d422a68bb0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nfJBg86 Size: 512B - Virtual size: 956KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nfJBg86 Size: 168KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE