Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
611efffea1d58b68a3967e98b8c70e83_JaffaCakes118
-
Size
491KB
-
Sample
240721-ybtmba1dqe
-
MD5
611efffea1d58b68a3967e98b8c70e83
-
SHA1
fc337463b6b2da9b61b1dc3a068de038cd6b37e9
-
SHA256
1a13d16848e43115530eb8ab59d019ad1f640ed4a84f665296e2611bfe3eb1c8
-
SHA512
bd7bdd62b075000014be03ead5733f9655afc4799021d294b2743344d49133f24be909f94fca2885ee33b0e158c56487305f34f378bbd09e0c1cfb88f0837be0
-
SSDEEP
12288:TBqMD6NTVD/7Ftyq1zH6NZU1D8fBbQji4+8E:1qMD6NNzdzH68ufty+8E
Static task
static1
Behavioral task
behavioral1
Sample
611efffea1d58b68a3967e98b8c70e83_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
611efffea1d58b68a3967e98b8c70e83_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
611efffea1d58b68a3967e98b8c70e83_JaffaCakes118
-
Size
491KB
-
MD5
611efffea1d58b68a3967e98b8c70e83
-
SHA1
fc337463b6b2da9b61b1dc3a068de038cd6b37e9
-
SHA256
1a13d16848e43115530eb8ab59d019ad1f640ed4a84f665296e2611bfe3eb1c8
-
SHA512
bd7bdd62b075000014be03ead5733f9655afc4799021d294b2743344d49133f24be909f94fca2885ee33b0e158c56487305f34f378bbd09e0c1cfb88f0837be0
-
SSDEEP
12288:TBqMD6NTVD/7Ftyq1zH6NZU1D8fBbQji4+8E:1qMD6NNzdzH68ufty+8E
Score7/10-
Executes dropped EXE
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Loads dropped DLL
-
Adds Run key to start application
-