Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_21be34dcbc43e31184765e85d6a14f7a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_21be34dcbc43e31184765e85d6a14f7a.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_21be34dcbc43e31184765e85d6a14f7a
-
Size
537KB
-
MD5
21be34dcbc43e31184765e85d6a14f7a
-
SHA1
29cb1b855c237836bdbeb7468d18cc93b6dafa53
-
SHA256
2aac488c209c03e3770aa873494f4f7eec92caa232b94bb15695fcdb8c488007
-
SHA512
d0ccfb1403165d1c11d791c6d24b7a9a886145e48244885d95e8aca1e510eecfba0873b58049fdd1da05385c92e3f6034b13d1e02edadab23a87f548b85de571
-
SSDEEP
6144:yYuw2rXhV5513Jh3Up7PnT3xiu0h0alUFtCTQLA5RyibeEb534q9LbQXzfBunB1X:xijUpznLQu0CljyRFx2q98ZILrroS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_21be34dcbc43e31184765e85d6a14f7a
Files
-
JaffaCakes118_21be34dcbc43e31184765e85d6a14f7a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE