Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_81c088a4c401ea21535c3866de657edf.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_81c088a4c401ea21535c3866de657edf
-
Size
272KB
-
MD5
81c088a4c401ea21535c3866de657edf
-
SHA1
fd233770fc551d80fa189f7114b68d35f9c9e4bd
-
SHA256
a7f30b760a8be07b0cac3c8b7622c0040d852cc8d8cee5888fb74a95ac322772
-
SHA512
bcdb5996a8a2bb6434f0e5032af859068749890a11e1adc1308fa7e3b7967cf6f6088dc9a4705c98597d75ae2b11b0c5aec975d3bafd6edacbce31abfdfa4251
-
SSDEEP
6144:Mk4qmr73P0MqUgOtiehS+jjr4vbdH/08yG2UIz:/9gPq7jajHUiUI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_81c088a4c401ea21535c3866de657edf
Files
-
JaffaCakes118_81c088a4c401ea21535c3866de657edf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE