Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8200f7b27e83686aac93daa2e16f7046.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_8200f7b27e83686aac93daa2e16f7046
-
Size
1.7MB
-
MD5
8200f7b27e83686aac93daa2e16f7046
-
SHA1
f8f7d8d11848cd3d05dacce9315aea14ee1a4ffe
-
SHA256
8907e39bd2682bd6d8d3d55bc7154dbf77407f576487a35603d610748e5c8f74
-
SHA512
26b032bae99b531ec5487a69de58f9e2d81f864bf4fa89c3cb55f4b4b25f646fe2df4b1f525f8817303071441868d4b7192edd7559a281853ea1170843cd25a1
-
SSDEEP
24576:l4omRyDXhm376hRSIjIR7X1my6wtFFOlN615BCD3jeHDXgMFwQS1oJeQPT2KIDcv:lAREXm+GIjIh1mGtFFs94wp12eYVIDcv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_8200f7b27e83686aac93daa2e16f7046
Files
-
JaffaCakes118_8200f7b27e83686aac93daa2e16f7046.exe windows:4 windows x86 arch:x86
394b3e18e03537a1c51f949fab757567
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
MethCallEngine
Sections
pec1 Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc_0 Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE