Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_83d2814d1d678e68b94c1bd135b7dc22.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_83d2814d1d678e68b94c1bd135b7dc22.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_83d2814d1d678e68b94c1bd135b7dc22
-
Size
64KB
-
MD5
83d2814d1d678e68b94c1bd135b7dc22
-
SHA1
dea9b28f44d63cfb887f0cf3382e5080c23fab03
-
SHA256
dcdd9b4aa7f222f1df5daed9d54141c29c2d976bba0461446976df2245ff3bb7
-
SHA512
18fddba8fec4574aabac677011445b3d438fa14dc2c5e75f9bec2e4d65aac62b88e206b0c5995d320d5cdce40d7607ecb7555f2954e8c9e398d5706a0d9bb2cb
-
SSDEEP
1536:/eXzad6a3HI0fsn5xCiXW9jFaLfOE+b7hsov0i:/eXzad6aXJsrKE3SYi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_83d2814d1d678e68b94c1bd135b7dc22
Files
-
JaffaCakes118_83d2814d1d678e68b94c1bd135b7dc22.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ