Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_981fd5b2119736e12f900c748a602e4e.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_981fd5b2119736e12f900c748a602e4e.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_981fd5b2119736e12f900c748a602e4e
-
Size
14KB
-
MD5
981fd5b2119736e12f900c748a602e4e
-
SHA1
4605a44da5b5a80d883ab18c9bea4833237022a3
-
SHA256
d84f41f99848750b26382fae91e3efcce9699efed263fae65f387e926c88a357
-
SHA512
28af72ad7708c8a7390e90688d6ac714a713805f70bbc61bf768ed0dd0524ab461651c5fea2bd0bdb14c95663c3ba5c6da7259e918af424662da6915f9a4f268
-
SSDEEP
384:3HgFit3fyNa1J+29B42ve/4KrXFWXKEQDZZp:3Qit3fn+2ReMKEw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_981fd5b2119736e12f900c748a602e4e
Files
-
JaffaCakes118_981fd5b2119736e12f900c748a602e4e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pe�� Size: 37B - Virtual size: 37B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uro Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE