Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
150e4a7ae550b391f3cefd0632d9f2db_JaffaCakes118
-
Size
602KB
-
Sample
240627-hpcyqazeqr
-
MD5
150e4a7ae550b391f3cefd0632d9f2db
-
SHA1
e93253a63e7c36903635b6063987d13d8f23b906
-
SHA256
bfd8a5e6ad2664896bc530e17de2afccc65dc3c0cd452e2b6322fea0c14ce5b5
-
SHA512
c9050c8103a330b1f79c1a078ee13e7479d3b44214e31bc421892aafc044b1815a554bf0d95501fc8cc96a00c750605ff1dc42de10c4e8ae24fd81521aeb5d51
-
SSDEEP
12288:YFLYhqdgwsDOdK+J3Imlq4xFbcx2vcyzLtZWzenJSzPv6:YFLkjw5J3Imlq4u2vcGrWaniPv6
Behavioral task
behavioral1
Sample
150e4a7ae550b391f3cefd0632d9f2db_JaffaCakes118.exe
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
150e4a7ae550b391f3cefd0632d9f2db_JaffaCakes118
-
Size
602KB
-
MD5
150e4a7ae550b391f3cefd0632d9f2db
-
SHA1
e93253a63e7c36903635b6063987d13d8f23b906
-
SHA256
bfd8a5e6ad2664896bc530e17de2afccc65dc3c0cd452e2b6322fea0c14ce5b5
-
SHA512
c9050c8103a330b1f79c1a078ee13e7479d3b44214e31bc421892aafc044b1815a554bf0d95501fc8cc96a00c750605ff1dc42de10c4e8ae24fd81521aeb5d51
-
SSDEEP
12288:YFLYhqdgwsDOdK+J3Imlq4xFbcx2vcyzLtZWzenJSzPv6:YFLkjw5J3Imlq4u2vcGrWaniPv6
-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Suspicious use of SetThreadContext
-