Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b4184fee416ab4fce72d0004fb6baaea_JaffaCakes118
-
Size
3.8MB
-
Sample
240616-sahkrs1grj
-
MD5
b4184fee416ab4fce72d0004fb6baaea
-
SHA1
f0fc72f1340cf93821af5add581701dc2d4b267b
-
SHA256
59d7522988d44df3fc31a7513c484a840cb0ae5bfc3cc6c4259edaa54adcd0c8
-
SHA512
20e02b1bcdd69bcb842dbbc4dae7b8a0cccdea0843404c52aad5006ce43a9ee2270353f963ef13b1a0aa30a5dbd8d5ba60e3729c0c94b276ebd9ce5844ba24c3
-
SSDEEP
98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPdr:uZHrzyG+2aDHGkS8CV
Behavioral task
behavioral1
Sample
b4184fee416ab4fce72d0004fb6baaea_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
b4184fee416ab4fce72d0004fb6baaea_JaffaCakes118
-
Size
3.8MB
-
MD5
b4184fee416ab4fce72d0004fb6baaea
-
SHA1
f0fc72f1340cf93821af5add581701dc2d4b267b
-
SHA256
59d7522988d44df3fc31a7513c484a840cb0ae5bfc3cc6c4259edaa54adcd0c8
-
SHA512
20e02b1bcdd69bcb842dbbc4dae7b8a0cccdea0843404c52aad5006ce43a9ee2270353f963ef13b1a0aa30a5dbd8d5ba60e3729c0c94b276ebd9ce5844ba24c3
-
SSDEEP
98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPdr:uZHrzyG+2aDHGkS8CV
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-