Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

3948900cb2...18.exe

windows7-x64

7

3948900cb2...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3948900cb21da391d0eef2b24d00b8f7_JaffaCakes118

  • Size

    644KB

  • Sample

    240711-qkmw5axhjj

  • MD5

    3948900cb21da391d0eef2b24d00b8f7

  • SHA1

    c443a655eeefd29f144934a11bdc1901999b91bb

  • SHA256

    c66ab6153399e7bb4dc0b52baec270ee1c5a2c23aba1839be7da216595ebbeba

  • SHA512

    99ffc103e4cfa28ae35e1308153979705b54dcf19416c0fe451773b16fe9852b0874dd80dc9228188ceabf031cb1b659adbb3757297ad013fb5f0880cb0f8ce5

  • SSDEEP

    12288:wQo8War1qI0aznfPrJBFkSxRc01ga8sLl3fgMo1zhQfT7Y50Up+8LX:ADs4IPfPrr5eBsR3YzhQb7YOUpv

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      3948900cb21da391d0eef2b24d00b8f7_JaffaCakes118

    • Size

      644KB

    • MD5

      3948900cb21da391d0eef2b24d00b8f7

    • SHA1

      c443a655eeefd29f144934a11bdc1901999b91bb

    • SHA256

      c66ab6153399e7bb4dc0b52baec270ee1c5a2c23aba1839be7da216595ebbeba

    • SHA512

      99ffc103e4cfa28ae35e1308153979705b54dcf19416c0fe451773b16fe9852b0874dd80dc9228188ceabf031cb1b659adbb3757297ad013fb5f0880cb0f8ce5

    • SSDEEP

      12288:wQo8War1qI0aznfPrJBFkSxRc01ga8sLl3fgMo1zhQfT7Y50Up+8LX:ADs4IPfPrr5eBsR3YzhQb7YOUpv

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks