Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7fa42358007ef5c8f6c6304f02ba3c40.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_7fa42358007ef5c8f6c6304f02ba3c40
-
Size
215KB
-
MD5
7fa42358007ef5c8f6c6304f02ba3c40
-
SHA1
23182cf1f7e002b83e5c490b638808f3c1135027
-
SHA256
36132d04f18eebedae9eed7daf394e635404eea4d22e85c70698d4f7f1347a42
-
SHA512
eb9e8e1918eea2a420a4946c759e4d5d9a7eda34f7563370787764f02b7f8a0b1ae409a0f372b7a50ac5a9469792c25efe81167d35a864951dae8ae0ab139eb0
-
SSDEEP
3072:XBjr/QMV3ha4MxeLsBQERPvTQFl/HLyHJNXPG9I7016nbEPVBIrMpcpGvQAOjr:XJzQMJFsBQERPLMl/4JdmI7iy2Nc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7fa42358007ef5c8f6c6304f02ba3c40
Files
-
JaffaCakes118_7fa42358007ef5c8f6c6304f02ba3c40.exe windows:4 windows x86 arch:x86
e5e2896806a3757d59700415d492e652
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord595
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord537
ord570
ord685
ord100
ord616
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ