Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_34b3d1a1586e9429dbdc2f4c34211fa9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_34b3d1a1586e9429dbdc2f4c34211fa9.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_34b3d1a1586e9429dbdc2f4c34211fa9
-
Size
284KB
-
MD5
34b3d1a1586e9429dbdc2f4c34211fa9
-
SHA1
aa3ac6165755ed08cacf5f28ae42a4bcb6718878
-
SHA256
6a4af2e8efc8e2f4d6d016438db9b4f4e8bae53af06759a426d18a0fb43e587d
-
SHA512
f18ac36af415c46aaaffac97bc17bd19ef41d8a82af39717bbf1147ebf6f835cc8ed1f6172c9254e68a543bc5f123447136e10cd95b48f833853e1112c13a278
-
SSDEEP
6144:fzsDNoICps4nDWgRAkPooGQn8xID0DMFYb2BoGv29tIBe6NxA/:LsCJlR3PPGLxe0DaeGvGtk3a/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_34b3d1a1586e9429dbdc2f4c34211fa9
Files
-
JaffaCakes118_34b3d1a1586e9429dbdc2f4c34211fa9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
FOlBoKWZ Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6B3ZUO1x Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
yE75nYLD Size: 273KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NyPrTorv Size: 241B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h5dYI1pn Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ