Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0ec44696f84ea6dbf0928c1ff01c0b32_JaffaCakes118
-
Size
29.1MB
-
Sample
240502-rxwkgada58
-
MD5
0ec44696f84ea6dbf0928c1ff01c0b32
-
SHA1
85dc65915d3e7f650962796e110d936b69f6b3e2
-
SHA256
433557de615efc6a62b1072d1b86d6fd9a98fcf7cf2de6362992f0fe3704794f
-
SHA512
9ca3c25abda86c4f75b3d9687adeef4c98be34ab9ba9ccc3ab4efba519cfa037923dad2ca24313c19abc87e02d16ffc0570810989cb0dfc70ca244e6f6929b97
-
SSDEEP
786432:YE2VxIFv+q0T4lpOa114ZFwWNfAObCzHuR1lXvjlx7MtP:52P0/k43cRpAO+Cj137MF
Static task
static1
Behavioral task
behavioral1
Sample
0ec44696f84ea6dbf0928c1ff01c0b32_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Malware Config
Targets
-
-
Target
0ec44696f84ea6dbf0928c1ff01c0b32_JaffaCakes118
-
Size
29.1MB
-
MD5
0ec44696f84ea6dbf0928c1ff01c0b32
-
SHA1
85dc65915d3e7f650962796e110d936b69f6b3e2
-
SHA256
433557de615efc6a62b1072d1b86d6fd9a98fcf7cf2de6362992f0fe3704794f
-
SHA512
9ca3c25abda86c4f75b3d9687adeef4c98be34ab9ba9ccc3ab4efba519cfa037923dad2ca24313c19abc87e02d16ffc0570810989cb0dfc70ca244e6f6929b97
-
SSDEEP
786432:YE2VxIFv+q0T4lpOa114ZFwWNfAObCzHuR1lXvjlx7MtP:52P0/k43cRpAO+Cj137MF
-
Checks Android system properties for emulator presence.
-
Checks known Qemu files.
Checks for known Qemu files that exist on Android virtual device images.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
-
MITRE ATT&CK Mobile v15
Defense Evasion
Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
5System Checks
5