Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_453d36819232cb50090b2848bd24e31d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_453d36819232cb50090b2848bd24e31d.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_453d36819232cb50090b2848bd24e31d
-
Size
773KB
-
MD5
453d36819232cb50090b2848bd24e31d
-
SHA1
bdcc5f5f7141dcfc46ff35e7fcf2ed4b22bc3f3d
-
SHA256
26d1ef36f48df366d3616fbecc3fa5e702a97ff2aa73aebbeb703880be63b8f5
-
SHA512
d52ec1cd987400b069506d3a66f398221acff1031ded92e0c1d14f9712e645148f03f3e69e98e7191e685c672250ec43dc863725b51c28d17df7531e13a42d1c
-
SSDEEP
24576:jrGhliIenmcaHg+yFK9hdltOQ+YyqKKwao1mKX6Aydl:jrS6aRPPdrcxKwaom66AY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_453d36819232cb50090b2848bd24e31d
Files
-
JaffaCakes118_453d36819232cb50090b2848bd24e31d.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 904KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lmrqfmke Size: 712KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ehgiareb Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE