Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e84294ec1372ff50f87f0292d93a0447_JaffaCakes118
-
Size
867KB
-
Sample
240408-yfr92saa63
-
MD5
e84294ec1372ff50f87f0292d93a0447
-
SHA1
5b1ce3dfdb2f35d7f0b386e4d607e4e341edb28e
-
SHA256
b441d70043458ea02a33d185ba174b8f12e772d27d1c68514a16890d7dbb8180
-
SHA512
8144ff3bdf85a48063d3c8b2f37cd6926b09798f3bb146941cc53d68906439ce95857cfe0473860075897f6f69732d7036c3dfea561a3d53f114890219bcced7
-
SSDEEP
12288:UlUUxvOae0+98PYVQ2V7qL7sb4lDY1qd8XmtXaoRGpK0VEary4d:U/08PWkp6Eem8oRGpK0VEqy4d
Static task
static1
Behavioral task
behavioral1
Sample
e84294ec1372ff50f87f0292d93a0447_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e84294ec1372ff50f87f0292d93a0447_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
e84294ec1372ff50f87f0292d93a0447_JaffaCakes118
-
Size
867KB
-
MD5
e84294ec1372ff50f87f0292d93a0447
-
SHA1
5b1ce3dfdb2f35d7f0b386e4d607e4e341edb28e
-
SHA256
b441d70043458ea02a33d185ba174b8f12e772d27d1c68514a16890d7dbb8180
-
SHA512
8144ff3bdf85a48063d3c8b2f37cd6926b09798f3bb146941cc53d68906439ce95857cfe0473860075897f6f69732d7036c3dfea561a3d53f114890219bcced7
-
SSDEEP
12288:UlUUxvOae0+98PYVQ2V7qL7sb4lDY1qd8XmtXaoRGpK0VEary4d:U/08PWkp6Eem8oRGpK0VEqy4d
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-