Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f1da56cf5639def98d6b8649e99e9efe_JaffaCakes118
-
Size
1000KB
-
Sample
240415-y7latahe91
-
MD5
f1da56cf5639def98d6b8649e99e9efe
-
SHA1
ebb8b26a49f443585151b8f9d04b37ef45762edb
-
SHA256
20d8e61856aec30adf9c9b7cad3ba66a2487ac0e11e36351be79c1a7ac60644f
-
SHA512
48f0ee20d5da00262a195735a89648a238a517d764550217be1dfc611f206b99cc35c7110ab43e176c5f02e70b1790b676f8b2b18b0c43fe03486be9c3183784
-
SSDEEP
24576:BQKGNUVesSWZIRr6Ts+ew1B+5vMiqt0gj2ed:iKGNUVbBx49aqOL
Static task
static1
Behavioral task
behavioral1
Sample
f1da56cf5639def98d6b8649e99e9efe_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1da56cf5639def98d6b8649e99e9efe_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
f1da56cf5639def98d6b8649e99e9efe_JaffaCakes118
-
Size
1000KB
-
MD5
f1da56cf5639def98d6b8649e99e9efe
-
SHA1
ebb8b26a49f443585151b8f9d04b37ef45762edb
-
SHA256
20d8e61856aec30adf9c9b7cad3ba66a2487ac0e11e36351be79c1a7ac60644f
-
SHA512
48f0ee20d5da00262a195735a89648a238a517d764550217be1dfc611f206b99cc35c7110ab43e176c5f02e70b1790b676f8b2b18b0c43fe03486be9c3183784
-
SSDEEP
24576:BQKGNUVesSWZIRr6Ts+ew1B+5vMiqt0gj2ed:iKGNUVbBx49aqOL
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-