Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
23cb26f635c4e2a3897a4a3427f8f5d5_JaffaCakes118
-
Size
1.0MB
-
Sample
240703-27bcdssgkf
-
MD5
23cb26f635c4e2a3897a4a3427f8f5d5
-
SHA1
5d1135ddfed215a4ddfe85a207e80a5098ea6657
-
SHA256
1b6d3d8b5cf8af37b7ead131124df60958500d3556ceb3aecd4b14d447cfd972
-
SHA512
951ec9e3f71d94315b8a01d8f88883a8dca3ecbb5ddd3b494184e57d474448ed9e7f2b9bd28efce293129cad552ced0580373a9fb9b1a6b0ab650da6ad62a78f
-
SSDEEP
12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjxq:r5sJo6YrFUiyAak11Ltjxq
Behavioral task
behavioral1
Sample
23cb26f635c4e2a3897a4a3427f8f5d5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23cb26f635c4e2a3897a4a3427f8f5d5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
23cb26f635c4e2a3897a4a3427f8f5d5_JaffaCakes118
-
Size
1.0MB
-
MD5
23cb26f635c4e2a3897a4a3427f8f5d5
-
SHA1
5d1135ddfed215a4ddfe85a207e80a5098ea6657
-
SHA256
1b6d3d8b5cf8af37b7ead131124df60958500d3556ceb3aecd4b14d447cfd972
-
SHA512
951ec9e3f71d94315b8a01d8f88883a8dca3ecbb5ddd3b494184e57d474448ed9e7f2b9bd28efce293129cad552ced0580373a9fb9b1a6b0ab650da6ad62a78f
-
SSDEEP
12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjxq:r5sJo6YrFUiyAak11Ltjxq
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-