C:\Users\Torpey\AppData\Roaming\Microsoft\Windows\Templates\??p??8B????.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_052b82fcd42bfe5dc415e629bedcbc33.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
JaffaCakes118_052b82fcd42bfe5dc415e629bedcbc33.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_052b82fcd42bfe5dc415e629bedcbc33
-
Size
535KB
-
MD5
052b82fcd42bfe5dc415e629bedcbc33
-
SHA1
44c17c32d338a58d6f1d4506844364f508f34b47
-
SHA256
5ee4a9eef7a4f139ab467287ab46a488e0a6c26d5e6cd5351c2890cd0442eb88
-
SHA512
0de941a64c29ea8bb278f77b00f6ff86384460693e619fc7b0d96128b0baac9b70425a67049774c61c3190fddf939ff3f9ddd1fa3ca42c5bfd6fbb4e4f4a7bb7
-
SSDEEP
12288:QsYRKwCIxs5CxghaDLQ/UDyt9bfELzKOFKGjJ4K0tz7CszTfM5e:jwQoxghaDeJt9tmDjJ4K0tz7CGTfM0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_052b82fcd42bfe5dc415e629bedcbc33
Files
-
JaffaCakes118_052b82fcd42bfe5dc415e629bedcbc33.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 533KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ