Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3e2fb6a345afa0aaa4dd9e3c7d92fcc7_JaffaCakes118
-
Size
163KB
-
Sample
240712-vqdmvsvcqh
-
MD5
3e2fb6a345afa0aaa4dd9e3c7d92fcc7
-
SHA1
4fb908dd9465302c7786bfe153247816608feb04
-
SHA256
cc885c4c9783c709166759e5d0139064a0a79de372d4d28f3ce0e37e15a984d8
-
SHA512
3d7dfd73024816539f265cb6febca9fd512153e51e7bb07f60c8105b79a6607effc1afa6f3053f70b6d4da3b638182ed3a10117c7979a7dbe6104660625b5c76
-
SSDEEP
1536:5bXKXuj4XqPrPXlDHNnzwDX4lOCUYcGeynP58riq7vqLUA94QsjibbZ+6P7SPS3W:5baPOrPhtdPqb7vq/2QbbZ+c2N
Static task
static1
Behavioral task
behavioral1
Sample
3e2fb6a345afa0aaa4dd9e3c7d92fcc7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e2fb6a345afa0aaa4dd9e3c7d92fcc7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
3e2fb6a345afa0aaa4dd9e3c7d92fcc7_JaffaCakes118
-
Size
163KB
-
MD5
3e2fb6a345afa0aaa4dd9e3c7d92fcc7
-
SHA1
4fb908dd9465302c7786bfe153247816608feb04
-
SHA256
cc885c4c9783c709166759e5d0139064a0a79de372d4d28f3ce0e37e15a984d8
-
SHA512
3d7dfd73024816539f265cb6febca9fd512153e51e7bb07f60c8105b79a6607effc1afa6f3053f70b6d4da3b638182ed3a10117c7979a7dbe6104660625b5c76
-
SSDEEP
1536:5bXKXuj4XqPrPXlDHNnzwDX4lOCUYcGeynP58riq7vqLUA94QsjibbZ+6P7SPS3W:5baPOrPhtdPqb7vq/2QbbZ+c2N
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-