Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

eccdcd55ea...18.exe

windows7-x64

9

eccdcd55ea...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eccdcd55ea59258e7f65c71f5f19dca7_JaffaCakes118

  • Size

    3.0MB

  • Sample

    240411-gmkp4sgg3y

  • MD5

    eccdcd55ea59258e7f65c71f5f19dca7

  • SHA1

    9ee951460d82a31e3affc96bb952e98c55570f6a

  • SHA256

    ef8fde3a279a057c683122cc548aca0618bbaa4360c27d8131d5251ddd861837

  • SHA512

    c2aa2be5332b024221a32ba0d2e77636d373e0d6c7872d6d34469256f22dcf31aeb2555f272774b5d1afbac6c3f8080298d76fdddbebf4ab7f0bebca90f3dc31

  • SSDEEP

    49152:S9Qkx5aFzMyvoOdhTnjSwfVviRX+APBhYWDnmhi42WfKsJlmTGiEem/ZVWm5W0:SRZOddjn5KPDYWDmhiRAuhLaZ5W0

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      eccdcd55ea59258e7f65c71f5f19dca7_JaffaCakes118

    • Size

      3.0MB

    • MD5

      eccdcd55ea59258e7f65c71f5f19dca7

    • SHA1

      9ee951460d82a31e3affc96bb952e98c55570f6a

    • SHA256

      ef8fde3a279a057c683122cc548aca0618bbaa4360c27d8131d5251ddd861837

    • SHA512

      c2aa2be5332b024221a32ba0d2e77636d373e0d6c7872d6d34469256f22dcf31aeb2555f272774b5d1afbac6c3f8080298d76fdddbebf4ab7f0bebca90f3dc31

    • SSDEEP

      49152:S9Qkx5aFzMyvoOdhTnjSwfVviRX+APBhYWDnmhi42WfKsJlmTGiEem/ZVWm5W0:SRZOddjn5KPDYWDmhiRAuhLaZ5W0

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks