Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
078a8716a5ea8298b15dd8218a5f70bd_JaffaCakes118
-
Size
3.8MB
-
Sample
240429-nem9lahc66
-
MD5
078a8716a5ea8298b15dd8218a5f70bd
-
SHA1
013a11ab6317840b722aab2bfce1aa458d5a1a41
-
SHA256
08d2bb66b38b1cabccaff36909f5575717105528cb544e9c899af29bbb17b2df
-
SHA512
675d3f0e2acc90312f498edcd17a0a6d498c613dbe71d33beca4ff0dee099d5e267b8947aa120111be54af25653b3df304771cafc7759e7ea9eaa1ae939ad2df
-
SSDEEP
98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPd7:uZHrzyG+2aDHGkS8Cp
Behavioral task
behavioral1
Sample
078a8716a5ea8298b15dd8218a5f70bd_JaffaCakes118.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
078a8716a5ea8298b15dd8218a5f70bd_JaffaCakes118
-
Size
3.8MB
-
MD5
078a8716a5ea8298b15dd8218a5f70bd
-
SHA1
013a11ab6317840b722aab2bfce1aa458d5a1a41
-
SHA256
08d2bb66b38b1cabccaff36909f5575717105528cb544e9c899af29bbb17b2df
-
SHA512
675d3f0e2acc90312f498edcd17a0a6d498c613dbe71d33beca4ff0dee099d5e267b8947aa120111be54af25653b3df304771cafc7759e7ea9eaa1ae939ad2df
-
SSDEEP
98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPd7:uZHrzyG+2aDHGkS8Cp
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-