Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ff6c9f545143b78ab33f7bab8f8c06b2_JaffaCakes118
-
Size
1.5MB
-
Sample
240421-q6a5fsdb5w
-
MD5
ff6c9f545143b78ab33f7bab8f8c06b2
-
SHA1
db07d2fbbccf51e9cf3ff88219858c301a96ae5f
-
SHA256
0f6517cbdb0e1c10059545a41fffc813730a05bbe48c6cb34645f6fb4a0194b8
-
SHA512
37daf4d513165848e415ce98c7aefdf0b83f0c5b194e2dfe75557e8938aad4ebf2f40024cfdd2d08e2629d7d56ae938d0f9446c18af9338fc82e9c1c7ee2f80b
-
SSDEEP
24576:jfc5Aea9cpvmClNb10hJaothZ2/T6FBBjNPI5lqkfZSkHR82b10hJaothZ2/T6FP:mAea9eHh/ofqg4/ofp
Static task
static1
Behavioral task
behavioral1
Sample
ff6c9f545143b78ab33f7bab8f8c06b2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff6c9f545143b78ab33f7bab8f8c06b2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ff6c9f545143b78ab33f7bab8f8c06b2_JaffaCakes118
-
Size
1.5MB
-
MD5
ff6c9f545143b78ab33f7bab8f8c06b2
-
SHA1
db07d2fbbccf51e9cf3ff88219858c301a96ae5f
-
SHA256
0f6517cbdb0e1c10059545a41fffc813730a05bbe48c6cb34645f6fb4a0194b8
-
SHA512
37daf4d513165848e415ce98c7aefdf0b83f0c5b194e2dfe75557e8938aad4ebf2f40024cfdd2d08e2629d7d56ae938d0f9446c18af9338fc82e9c1c7ee2f80b
-
SSDEEP
24576:jfc5Aea9cpvmClNb10hJaothZ2/T6FBBjNPI5lqkfZSkHR82b10hJaothZ2/T6FP:mAea9eHh/ofqg4/ofp
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-