Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
30/03/2024, 22:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
45f492738b5837a99021587474b5bb18_JaffaCakes118.exe
Resource
win7-20240221-en
2 signatures
150 seconds
General
-
Target
45f492738b5837a99021587474b5bb18_JaffaCakes118.exe
-
Size
539KB
-
MD5
45f492738b5837a99021587474b5bb18
-
SHA1
f94706f7fcaed1eb06433f6b43795d0ae18506bd
-
SHA256
dffc79b15d481b0300b3b6f2c117dd4a3d372d5ded10db7856b5028c58199a4b
-
SHA512
0c5d3b71ddecbe020f879499af963c0b15b6d14e1bc93df7f2320218f62c4fb40ed44e350c990bb6e8d225a2297a81c239925eb73ed1f44a116dff0ff4653f8c
-
SSDEEP
12288:+/DRygvOJhzItoIg2xojFngAwZGEX8cA0/M:mfvaItBxInSsEv
Malware Config
Signatures
-
Raccoon Stealer V1 payload 5 IoCs
resource yara_rule behavioral1/memory/1540-2-0x0000000000260000-0x00000000002EE000-memory.dmp family_raccoon_v1 behavioral1/memory/1540-3-0x0000000000400000-0x0000000002F50000-memory.dmp family_raccoon_v1 behavioral1/memory/1540-4-0x0000000000400000-0x0000000002F50000-memory.dmp family_raccoon_v1 behavioral1/memory/1540-7-0x0000000000260000-0x00000000002EE000-memory.dmp family_raccoon_v1 behavioral1/memory/1540-16-0x0000000000400000-0x0000000002F50000-memory.dmp family_raccoon_v1