Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_826ec48ebb7f552427379ea8d6940b22.exe
Resource
win7-20240729-en
General
-
Target
JaffaCakes118_826ec48ebb7f552427379ea8d6940b22
-
Size
398KB
-
MD5
826ec48ebb7f552427379ea8d6940b22
-
SHA1
8becc29cf11e1ddf8bd67a5b89ad6465e1ec6131
-
SHA256
dfd275c9d539a68d0951273ce959f4690a9f83f6dc7d8ba768ad0a3681ff9ec5
-
SHA512
580d794047c76b93382beaabf2b608a6b78eb0b83c99ef1aaa1cc0b0c443d8dbeeb77c3300e32d3f8d84d0198a5f7e00b76b00729744fe745b9bf113298d5813
-
SSDEEP
6144:9eUdZsjhBHc8iw+BJdb802wtUfSf+vzid/cPFL4pcsNSHuVKtCm+c:9HQUwAN8/RSwy/cPFLcVNuuQCRc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_826ec48ebb7f552427379ea8d6940b22
Files
-
JaffaCakes118_826ec48ebb7f552427379ea8d6940b22.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 385KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ