Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_80eff0b933dbc5e3bb3a6f562a72299a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_80eff0b933dbc5e3bb3a6f562a72299a.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_80eff0b933dbc5e3bb3a6f562a72299a
-
Size
1.1MB
-
MD5
80eff0b933dbc5e3bb3a6f562a72299a
-
SHA1
f67e224bb4e099969605988aa8d7fada6ccb6661
-
SHA256
9db2cf1fbaab9fe3fefe30f813c5d436733a6869ef149be578a2eeb13fd0bf47
-
SHA512
6214802075cc18c9612ddff992b7b5481b4b08a8db32eca66652d68026a01dbb0f69af43434d09fd1b03bf2f6387d4a9be5aff1000b95277e0b36a4a53fafca9
-
SSDEEP
24576:XQ4Fe0pxx5cyLzoy4z5LPrMcs5dmYOYFQn1s97QJv8wBr:X/nzbL0zzJsKJS1QJv8wBr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_80eff0b933dbc5e3bb3a6f562a72299a
Files
-
JaffaCakes118_80eff0b933dbc5e3bb3a6f562a72299a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 227KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE