Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3940ec561ee9f25288b59d8ef31f8a2c_JaffaCakes118
-
Size
940KB
-
Sample
240711-qew8lsxfjp
-
MD5
3940ec561ee9f25288b59d8ef31f8a2c
-
SHA1
35da11fb910b2c0317cb947e99b0f6893f4b0f0b
-
SHA256
524d99b4e16d5c563bde2611e69a214d5fdee5761181e68cd482dd004a3f6e02
-
SHA512
9b7274c438531e4b52c06c64f703b87207668b05e63d0bff1d74814fcd96f00839f6c4c5c033d45b2967189ea4c3de69f7a1a5a76a9ff9e863bcaf2e61067101
-
SSDEEP
12288:OKVVRYin4+EvfXS2u15Vq/CRbKQt7Ibc1TsrfTTWz5UwN7lABKXmfFj2DOJ7rYXz:O8nhOi2i5Vq/CRxc4SrfHWqnN78Xf3
Behavioral task
behavioral1
Sample
3940ec561ee9f25288b59d8ef31f8a2c_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Targets
-
-
Target
3940ec561ee9f25288b59d8ef31f8a2c_JaffaCakes118
-
Size
940KB
-
MD5
3940ec561ee9f25288b59d8ef31f8a2c
-
SHA1
35da11fb910b2c0317cb947e99b0f6893f4b0f0b
-
SHA256
524d99b4e16d5c563bde2611e69a214d5fdee5761181e68cd482dd004a3f6e02
-
SHA512
9b7274c438531e4b52c06c64f703b87207668b05e63d0bff1d74814fcd96f00839f6c4c5c033d45b2967189ea4c3de69f7a1a5a76a9ff9e863bcaf2e61067101
-
SSDEEP
12288:OKVVRYin4+EvfXS2u15Vq/CRbKQt7Ibc1TsrfTTWz5UwN7lABKXmfFj2DOJ7rYXz:O8nhOi2i5Vq/CRxc4SrfHWqnN78Xf3
Score7/10-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-