Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0041ae21f6eeb396f6d38e4aab46e51e_JaffaCakes118
-
Size
76KB
-
Sample
240619-ysx13ayhrc
-
MD5
0041ae21f6eeb396f6d38e4aab46e51e
-
SHA1
05c113b693cd27dcdd28321b1575e83df258b13b
-
SHA256
b62d38bce35f1b03d28364b52d67970b6d0eb5090030696dd75e70fdf36aad88
-
SHA512
f68d63b858a57cd7212347799132dbb55bb1301647156298c353952b5a99451ab83f060337c696089148c3021f0a180e9ad3883123f2af1a2e5d69cd902127fb
-
SSDEEP
1536:mX2Ix115R0JuPFrZBh+DYNJxcLwCuDPUbohbpQulUt:mX2I+6Z8uDPUchlQul
Static task
static1
Behavioral task
behavioral1
Sample
0041ae21f6eeb396f6d38e4aab46e51e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0041ae21f6eeb396f6d38e4aab46e51e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
0041ae21f6eeb396f6d38e4aab46e51e_JaffaCakes118
-
Size
76KB
-
MD5
0041ae21f6eeb396f6d38e4aab46e51e
-
SHA1
05c113b693cd27dcdd28321b1575e83df258b13b
-
SHA256
b62d38bce35f1b03d28364b52d67970b6d0eb5090030696dd75e70fdf36aad88
-
SHA512
f68d63b858a57cd7212347799132dbb55bb1301647156298c353952b5a99451ab83f060337c696089148c3021f0a180e9ad3883123f2af1a2e5d69cd902127fb
-
SSDEEP
1536:mX2Ix115R0JuPFrZBh+DYNJxcLwCuDPUbohbpQulUt:mX2I+6Z8uDPUchlQul
Score6/10-
Modifies WinLogon
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-