Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6ff6aede88f37cf8daaa009c589d5e35_JaffaCakes118
-
Size
4.7MB
-
Sample
240524-16xzbsda51
-
MD5
6ff6aede88f37cf8daaa009c589d5e35
-
SHA1
2b7e4048555c8e63e045a15b08d744090c0112c8
-
SHA256
8862ad7d44047f0404ae27f1b8f68ad6a9cb6c601cf567d438171d4152869481
-
SHA512
f2b5f06c15cb9f4562bdff1cadf250c53acec896bbcc0cbbc002a9df2cc7415dc3c1c9c743659bdbe940f8182cbb7d73435a9c392e73235fd1979717d9f58d61
-
SSDEEP
98304:Tl88udp4A2evUNGnVuUwGLVWy0/OQmjmUah6rpHDT:yzDiNyiXfGDvN
Behavioral task
behavioral1
Sample
6ff6aede88f37cf8daaa009c589d5e35_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
6ff6aede88f37cf8daaa009c589d5e35_JaffaCakes118
-
Size
4.7MB
-
MD5
6ff6aede88f37cf8daaa009c589d5e35
-
SHA1
2b7e4048555c8e63e045a15b08d744090c0112c8
-
SHA256
8862ad7d44047f0404ae27f1b8f68ad6a9cb6c601cf567d438171d4152869481
-
SHA512
f2b5f06c15cb9f4562bdff1cadf250c53acec896bbcc0cbbc002a9df2cc7415dc3c1c9c743659bdbe940f8182cbb7d73435a9c392e73235fd1979717d9f58d61
-
SSDEEP
98304:Tl88udp4A2evUNGnVuUwGLVWy0/OQmjmUah6rpHDT:yzDiNyiXfGDvN
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-