Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0c91b2089f7ccbbdb26b0b0f75e37540_JaffaCakes118
-
Size
4.7MB
-
Sample
240501-xhgewsga52
-
MD5
0c91b2089f7ccbbdb26b0b0f75e37540
-
SHA1
f7ad85e240a8b6c74d92e7523ec1e448d690aa8b
-
SHA256
918ec0c4e166aa2faf01302520fb32d154bd9cbb02a85a25fbdae018d4362a46
-
SHA512
204922ce1ce68db289f229d33dbc2df24dc03cfc80350a49fbce9fee3252db2b9330d919080f5154937e6052893a20aec9cded159902623e84b3fd12f0f0c60f
-
SSDEEP
98304:N4POBl1A91R1ymTND2oELtX/6jh/FGZTI2qijLcq0imSTnj:K2Bl1wlNaAjhtGZTnjjLii3j
Behavioral task
behavioral1
Sample
0c91b2089f7ccbbdb26b0b0f75e37540_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
0c91b2089f7ccbbdb26b0b0f75e37540_JaffaCakes118
-
Size
4.7MB
-
MD5
0c91b2089f7ccbbdb26b0b0f75e37540
-
SHA1
f7ad85e240a8b6c74d92e7523ec1e448d690aa8b
-
SHA256
918ec0c4e166aa2faf01302520fb32d154bd9cbb02a85a25fbdae018d4362a46
-
SHA512
204922ce1ce68db289f229d33dbc2df24dc03cfc80350a49fbce9fee3252db2b9330d919080f5154937e6052893a20aec9cded159902623e84b3fd12f0f0c60f
-
SSDEEP
98304:N4POBl1A91R1ymTND2oELtX/6jh/FGZTI2qijLcq0imSTnj:K2Bl1wlNaAjhtGZTnjjLii3j
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-