Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0852f99b88f8ce280ca53a8214a2d074_JaffaCakes118
-
Size
307KB
-
Sample
240624-nxe1yazgnc
-
MD5
0852f99b88f8ce280ca53a8214a2d074
-
SHA1
d4983e49361dc950147b8d4be3da838548460191
-
SHA256
1f0f5ca8f51b8f0c56aca6ab6214d0eba89856c7051c490a68a1b0ebbbc1b7d9
-
SHA512
e6be12973845c054afa89aa3170640b4e7727b25fe9119ff8c81d23980f158be5619d73ff33fd884e1c91909ad48d54504c24dd4309bed90ec9c1d5a191b6aa8
-
SSDEEP
6144:rxYzQ9SEr2I6jBZNp0H8vIz3YX5Sze2wpchpkUJ1HVBh4kHIC:rzSs6j5QTKk9h1HVAC
Static task
static1
Behavioral task
behavioral1
Sample
0852f99b88f8ce280ca53a8214a2d074_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0852f99b88f8ce280ca53a8214a2d074_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0852f99b88f8ce280ca53a8214a2d074_JaffaCakes118
-
Size
307KB
-
MD5
0852f99b88f8ce280ca53a8214a2d074
-
SHA1
d4983e49361dc950147b8d4be3da838548460191
-
SHA256
1f0f5ca8f51b8f0c56aca6ab6214d0eba89856c7051c490a68a1b0ebbbc1b7d9
-
SHA512
e6be12973845c054afa89aa3170640b4e7727b25fe9119ff8c81d23980f158be5619d73ff33fd884e1c91909ad48d54504c24dd4309bed90ec9c1d5a191b6aa8
-
SSDEEP
6144:rxYzQ9SEr2I6jBZNp0H8vIz3YX5Sze2wpchpkUJ1HVBh4kHIC:rzSs6j5QTKk9h1HVAC
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-