Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4642ac44aa8c0d72dffc8d82bcce75b3_JaffaCakes118
-
Size
3.3MB
-
Sample
240515-p4dbcsad76
-
MD5
4642ac44aa8c0d72dffc8d82bcce75b3
-
SHA1
69d0abf2a5b6921eaa16b125d16c63dd85b19ae0
-
SHA256
06ea9f882c6deaef4044a39655a87ae928c6a601ffef6147420e756ec7b55fdf
-
SHA512
78faf9928edaafce151e33f72d6a2a294a9480324e50acba42abac757151845d1f407adafd967296caf3fbc9e027736fd6aa35434810a90a5e765472a31ff2a9
-
SSDEEP
98304:xugfuWWFkFL7EBasOqFRl8Fr24J73DwpwOtywXN3XWiBj3N:xvLWOLpEcJpXA
Static task
static1
Behavioral task
behavioral1
Sample
4642ac44aa8c0d72dffc8d82bcce75b3_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
4642ac44aa8c0d72dffc8d82bcce75b3_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
4642ac44aa8c0d72dffc8d82bcce75b3_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
Malware Config
Targets
-
-
Target
4642ac44aa8c0d72dffc8d82bcce75b3_JaffaCakes118
-
Size
3.3MB
-
MD5
4642ac44aa8c0d72dffc8d82bcce75b3
-
SHA1
69d0abf2a5b6921eaa16b125d16c63dd85b19ae0
-
SHA256
06ea9f882c6deaef4044a39655a87ae928c6a601ffef6147420e756ec7b55fdf
-
SHA512
78faf9928edaafce151e33f72d6a2a294a9480324e50acba42abac757151845d1f407adafd967296caf3fbc9e027736fd6aa35434810a90a5e765472a31ff2a9
-
SSDEEP
98304:xugfuWWFkFL7EBasOqFRl8Fr24J73DwpwOtywXN3XWiBj3N:xvLWOLpEcJpXA
Score7/10-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Schedules tasks to execute at a specified time
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
-