Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_3a4185f50b2f02ce2d533bac475d6544.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3a4185f50b2f02ce2d533bac475d6544.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_3a4185f50b2f02ce2d533bac475d6544
-
Size
405KB
-
MD5
3a4185f50b2f02ce2d533bac475d6544
-
SHA1
e6e35e1c90fb6cc37b5bd754fa0c310112db02b8
-
SHA256
503272fb015d5607dcdeb347f9f4b968d73ababeab618040f1f1a62d487679b9
-
SHA512
df4e5854efe93baf30e5ef7a07b239fb72528cda99091cd04ea732a54382cd6b57f116e1eddb20083d9c39234d21c7507c5d08aa1b2056334c72adf020659588
-
SSDEEP
6144:7evzV8Yct6Ym5OjI6UOwqdC32bAAzMFBYc:7e7V8rzmb6URlizUBF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_3a4185f50b2f02ce2d533bac475d6544
Files
-
JaffaCakes118_3a4185f50b2f02ce2d533bac475d6544.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 804KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE