Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6754cfdaf6b5487ecb821181118b9d6a_JaffaCakes118
-
Size
802KB
-
Sample
240723-m7st4ssele
-
MD5
6754cfdaf6b5487ecb821181118b9d6a
-
SHA1
ff400d290b0749dc26149746e0e9419124312a5c
-
SHA256
c7f746f3a931a594599809c6028510e36f40bef75f79db6552b8534896c8214b
-
SHA512
bb101690a9e8fa6fc63b92f399b3cfb0c29477f1eb0ed3d0f14a68fe3e439d0becf6fd9ce340562e5628b58637ff2d30f59b9272ff7b31b5c082a1366f4f4aa2
-
SSDEEP
12288:EkaUCoaryqBhxJ/+anNLD5Ejj1UdY6dRgKk21Y9jqd39uVqeO5o/HPJQ:EUXjqBl+ES1NeFe9jUuVq7K/Hi
Static task
static1
Behavioral task
behavioral1
Sample
6754cfdaf6b5487ecb821181118b9d6a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6754cfdaf6b5487ecb821181118b9d6a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
6754cfdaf6b5487ecb821181118b9d6a_JaffaCakes118
-
Size
802KB
-
MD5
6754cfdaf6b5487ecb821181118b9d6a
-
SHA1
ff400d290b0749dc26149746e0e9419124312a5c
-
SHA256
c7f746f3a931a594599809c6028510e36f40bef75f79db6552b8534896c8214b
-
SHA512
bb101690a9e8fa6fc63b92f399b3cfb0c29477f1eb0ed3d0f14a68fe3e439d0becf6fd9ce340562e5628b58637ff2d30f59b9272ff7b31b5c082a1366f4f4aa2
-
SSDEEP
12288:EkaUCoaryqBhxJ/+anNLD5Ejj1UdY6dRgKk21Y9jqd39uVqeO5o/HPJQ:EUXjqBl+ES1NeFe9jUuVq7K/Hi
Score9/10-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Suspicious use of SetThreadContext
-