Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
193966e2186ce5774d35859fd9aa2dd1_JaffaCakes118
-
Size
396KB
-
Sample
240628-hxlwlazckm
-
MD5
193966e2186ce5774d35859fd9aa2dd1
-
SHA1
7864ecc94e2c0ecd67554ccd00e816a510111c8f
-
SHA256
c6bbcd5f26895345892f51ceaa4c3df19571ccf6092b84a06994996248c869ac
-
SHA512
daa33331a7396780fb7f3c333b28801de4559e776b6086e96ebe4fe87f7949e7ad3396aea488587c566b56333fd526ac6693f39d58958011afb9f6ecc5fb489d
-
SSDEEP
6144:N8ETN+hTHUX2CvzeAes+cmhbqYglH8jXEmqzfdllGerRn2+KjqqrzTfAEcF:ZdvvzeAR+cwKxyXqfdimnuOq/kE
Static task
static1
Behavioral task
behavioral1
Sample
193966e2186ce5774d35859fd9aa2dd1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
193966e2186ce5774d35859fd9aa2dd1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
193966e2186ce5774d35859fd9aa2dd1_JaffaCakes118
-
Size
396KB
-
MD5
193966e2186ce5774d35859fd9aa2dd1
-
SHA1
7864ecc94e2c0ecd67554ccd00e816a510111c8f
-
SHA256
c6bbcd5f26895345892f51ceaa4c3df19571ccf6092b84a06994996248c869ac
-
SHA512
daa33331a7396780fb7f3c333b28801de4559e776b6086e96ebe4fe87f7949e7ad3396aea488587c566b56333fd526ac6693f39d58958011afb9f6ecc5fb489d
-
SSDEEP
6144:N8ETN+hTHUX2CvzeAes+cmhbqYglH8jXEmqzfdllGerRn2+KjqqrzTfAEcF:ZdvvzeAR+cwKxyXqfdimnuOq/kE
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Loads dropped DLL
-
Drops file in System32 directory
-