Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7e298ba89ebc4a47409a7b55d754bd50.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7e298ba89ebc4a47409a7b55d754bd50.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_7e298ba89ebc4a47409a7b55d754bd50
-
Size
535KB
-
MD5
7e298ba89ebc4a47409a7b55d754bd50
-
SHA1
b98d1a74048c928d5cdbc745c4652389f0750fc7
-
SHA256
abad4bb559ea302eb60cbcc9049a7734ea11f488f4939a3f1c5698c437672459
-
SHA512
eadb285c1305d5e57be5dd71fa9f50678e7705715bd2d575f3aec8750f408ba781b166c2a2e93abe286ac090d8e2532957cf2a38e81ebf75c2361b8386793606
-
SSDEEP
12288:Loi8Dyo1mMLM4kBRqaz76oa304T8I6o3Ef2/NQMjE:LoV2orL1eN78E4T1/rjE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7e298ba89ebc4a47409a7b55d754bd50
Files
-
JaffaCakes118_7e298ba89ebc4a47409a7b55d754bd50.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
xxxxx Size: 19KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cccccccc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vvvvvvvv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tttttttt Size: 469KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ffffffff Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qqqqqqqq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddddddd Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE