Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_0deb01c1e5515e5d08d6c1a9eba8eb1a.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
JaffaCakes118_0deb01c1e5515e5d08d6c1a9eba8eb1a.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_0deb01c1e5515e5d08d6c1a9eba8eb1a
-
Size
852KB
-
MD5
0deb01c1e5515e5d08d6c1a9eba8eb1a
-
SHA1
789c304441679dd787843a8869b88ab8d4e67590
-
SHA256
5d7b2bf59551ac7aa0605712571a7dc79ac6eb05d6ba82f6382d7a24c4ad7f0c
-
SHA512
3a0ba3dd8be3459ea9b1d873b0ae8c3842a036ea938a7799c626caa800f5dcdb147f31c238204dbd57c95b3db28501d864c78af2c8651ce4b3a2bf92ceb11b53
-
SSDEEP
24576:z1BoinfHhTY6IG613seSAdRghVNbxp055s:z39nfBTYFB3RSAdRcbd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0deb01c1e5515e5d08d6c1a9eba8eb1a
Files
-
JaffaCakes118_0deb01c1e5515e5d08d6c1a9eba8eb1a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 691KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE