Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4129fd88eb45ee0d870c96220f32d357_JaffaCakes118
-
Size
253KB
-
Sample
240713-lrpl3sxhra
-
MD5
4129fd88eb45ee0d870c96220f32d357
-
SHA1
575a6b036ac03ecf0934a64d79a57665f9cf184b
-
SHA256
8e414e83ad6b3f99bef714a2a023fd244a812bc990bc79d702534442c35050c2
-
SHA512
3f1c4c3d6c5f814b50f8ebb1f99d6c8b21fe660ad15ff7c00e8d520624b5bc05dd3a8896436e32ae013a1a0da4f6d98d4ec09277c9f182370e2c6ee46b599820
-
SSDEEP
6144:g/0uopAiF7tWm9d9qdH1lexDodpCGR4srdgUScDH:gJpQzqhexDod7R4XU
Static task
static1
Behavioral task
behavioral1
Sample
4129fd88eb45ee0d870c96220f32d357_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4129fd88eb45ee0d870c96220f32d357_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
4129fd88eb45ee0d870c96220f32d357_JaffaCakes118
-
Size
253KB
-
MD5
4129fd88eb45ee0d870c96220f32d357
-
SHA1
575a6b036ac03ecf0934a64d79a57665f9cf184b
-
SHA256
8e414e83ad6b3f99bef714a2a023fd244a812bc990bc79d702534442c35050c2
-
SHA512
3f1c4c3d6c5f814b50f8ebb1f99d6c8b21fe660ad15ff7c00e8d520624b5bc05dd3a8896436e32ae013a1a0da4f6d98d4ec09277c9f182370e2c6ee46b599820
-
SSDEEP
6144:g/0uopAiF7tWm9d9qdH1lexDodpCGR4srdgUScDH:gJpQzqhexDod7R4XU
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-