Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2ed1c54e861545797b5c8e3d9d9199e0_JaffaCakes118
-
Size
385KB
-
Sample
240709-dv6qrswcrg
-
MD5
2ed1c54e861545797b5c8e3d9d9199e0
-
SHA1
f5a7a0390c613636324ba78f00b6fdd12e8c4d9a
-
SHA256
8f477e403616e74e8cc7b216be6aa31d7c8b3fc52a68ee4775220760172d2c99
-
SHA512
4a07d6ecc0d6b087ec1ad7610a9be2e59412677a2e085f9f307cc473b8fcd1d9a5625447c290010a2cdba3b14c937f7883cb6d233b5bb141cf26bac9e4b5d138
-
SSDEEP
6144:m/8xmxLy7OvxilGHUmlXExMXW/DJSw4LlKg90H65Q6UZo7M+Pe:mExmJ7kvmhExcODJSzLk7a5QTL
Static task
static1
Behavioral task
behavioral1
Sample
2ed1c54e861545797b5c8e3d9d9199e0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ed1c54e861545797b5c8e3d9d9199e0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
2ed1c54e861545797b5c8e3d9d9199e0_JaffaCakes118
-
Size
385KB
-
MD5
2ed1c54e861545797b5c8e3d9d9199e0
-
SHA1
f5a7a0390c613636324ba78f00b6fdd12e8c4d9a
-
SHA256
8f477e403616e74e8cc7b216be6aa31d7c8b3fc52a68ee4775220760172d2c99
-
SHA512
4a07d6ecc0d6b087ec1ad7610a9be2e59412677a2e085f9f307cc473b8fcd1d9a5625447c290010a2cdba3b14c937f7883cb6d233b5bb141cf26bac9e4b5d138
-
SSDEEP
6144:m/8xmxLy7OvxilGHUmlXExMXW/DJSw4LlKg90H65Q6UZo7M+Pe:mExmJ7kvmhExcODJSzLk7a5QTL
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-