Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_62c284e413906e5db4d7c4e5291c8c59.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_62c284e413906e5db4d7c4e5291c8c59.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_62c284e413906e5db4d7c4e5291c8c59
-
Size
320KB
-
MD5
62c284e413906e5db4d7c4e5291c8c59
-
SHA1
8ed758d0abf36b57c5ab6e7485eface4180e3730
-
SHA256
9f587ce911e0af79e44c483392ea3eeea4c0367c0af133fe984a30d0caee1627
-
SHA512
1e3ed9fb3c443cb1e16925a19b5bf9b285843315e5e667be0dfc1f4615f30af3499a68378ee1458565ca8c7ae2222937f3d368e41087c72286820936745f1964
-
SSDEEP
6144:IvM/Haymfu4nDWgRAkPD2GQn8xID0DMF3kBydfSN5ndyaizYuyLn5:p6DR3PD2GLxe0Dvya5n3ize
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_62c284e413906e5db4d7c4e5291c8c59
Files
-
JaffaCakes118_62c284e413906e5db4d7c4e5291c8c59.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
q2HIv8yR Size: - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
X2viFNMO Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
r7Tdi7UC Size: 292KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jiDHksJ8 Size: 218B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5wNRDXsS Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ