Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_da03302fc74100b9ad36064d1de3c78e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_da03302fc74100b9ad36064d1de3c78e.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_da03302fc74100b9ad36064d1de3c78e
-
Size
532KB
-
MD5
da03302fc74100b9ad36064d1de3c78e
-
SHA1
4d16a8867c2641ed198822ad8be2287db031681a
-
SHA256
2d1141e1dce9ef51a89f5ec3eee06a3bdf9a0129cd372340fe530bb696c28340
-
SHA512
58485fe46b11c0b0203eb9d02223c63ab6b70256a1f2f1fb6664569d39128f82efc225ceb20b4e932e0fda70c941461447d30f0532a8cd33e421b139a04ffe37
-
SSDEEP
6144:hIJ/N5GXadtcJeUth55C+pvCAcRcCmAH4ttI/wonOSTy19ZWZKUlx1fHTF5I:uf5GKEgUycvCcCN/wZTWZ5lLE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_da03302fc74100b9ad36064d1de3c78e
Files
-
JaffaCakes118_da03302fc74100b9ad36064d1de3c78e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE