Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
81b920a2751255dae1257dcb92ecf68e_JaffaCakes118
-
Size
4.0MB
-
Sample
240529-ymt28afg7y
-
MD5
81b920a2751255dae1257dcb92ecf68e
-
SHA1
bcfad187eaf61bb77b3861d512c8fc92df41295d
-
SHA256
f39b8e2e21f9736d0ee767b97543dceb58c7dd60baaf50eada5aec73f8613c77
-
SHA512
06c01e1ab0209ad6519f3da60c4c4dfc90c0b069c0d58cb3acf63ca708be6c149492823cdc6a01f1a7a8aadfec64e12522bd10198b1d81404bf8761e12d07add
-
SSDEEP
98304:/S4EprbxWVhe2LI4xiXuBeGeOhOPYNvh9YJ1zZ0xxI4ItpyMlKx01q:/SNWbNBYAZLYJPc/ItWxT
Behavioral task
behavioral1
Sample
81b920a2751255dae1257dcb92ecf68e_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
81b920a2751255dae1257dcb92ecf68e_JaffaCakes118
-
Size
4.0MB
-
MD5
81b920a2751255dae1257dcb92ecf68e
-
SHA1
bcfad187eaf61bb77b3861d512c8fc92df41295d
-
SHA256
f39b8e2e21f9736d0ee767b97543dceb58c7dd60baaf50eada5aec73f8613c77
-
SHA512
06c01e1ab0209ad6519f3da60c4c4dfc90c0b069c0d58cb3acf63ca708be6c149492823cdc6a01f1a7a8aadfec64e12522bd10198b1d81404bf8761e12d07add
-
SSDEEP
98304:/S4EprbxWVhe2LI4xiXuBeGeOhOPYNvh9YJ1zZ0xxI4ItpyMlKx01q:/SNWbNBYAZLYJPc/ItWxT
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-