Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f237d81467076c00c5db9b4360758a4a_JaffaCakes118
-
Size
385KB
-
Sample
240415-3z53gabg84
-
MD5
f237d81467076c00c5db9b4360758a4a
-
SHA1
f75120ee2a3fe6833456481b9afacbd75b954a6d
-
SHA256
b2a40e2d57a690db443740cb7c0c92c7de67fdd885eaccbea76918a49d43886a
-
SHA512
d4cbee353779ace3a460a8fd4af5e67027c3da05c868e44d7cf6641223266b17a65885dfc37c3526e52bb22ad9a3c6d24b9297ecf93f5a66aaf85a975034c9c5
-
SSDEEP
12288:qNAP2dK3/GY/wTAPfacKyZBF2/Wo6E71aB:xUW/TPixQBo/BaB
Static task
static1
Behavioral task
behavioral1
Sample
f237d81467076c00c5db9b4360758a4a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f237d81467076c00c5db9b4360758a4a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
f237d81467076c00c5db9b4360758a4a_JaffaCakes118
-
Size
385KB
-
MD5
f237d81467076c00c5db9b4360758a4a
-
SHA1
f75120ee2a3fe6833456481b9afacbd75b954a6d
-
SHA256
b2a40e2d57a690db443740cb7c0c92c7de67fdd885eaccbea76918a49d43886a
-
SHA512
d4cbee353779ace3a460a8fd4af5e67027c3da05c868e44d7cf6641223266b17a65885dfc37c3526e52bb22ad9a3c6d24b9297ecf93f5a66aaf85a975034c9c5
-
SSDEEP
12288:qNAP2dK3/GY/wTAPfacKyZBF2/Wo6E71aB:xUW/TPixQBo/BaB
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-