Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
834bd88cfcc459b6357c4c0a446c035a_JaffaCakes118
-
Size
727KB
-
Sample
240802-gr5abazcnn
-
MD5
834bd88cfcc459b6357c4c0a446c035a
-
SHA1
ce72baf9529394b39db2df5afa182d76242fa59b
-
SHA256
d6890b0de0b96906eec7b6970bda85b566d73546fd2a6bc71eef15c0af222997
-
SHA512
f0778b198084dd74e452546d32d70fb6dd7b452f719988ffb983f5341f51200b0e3deee65bb1f951500d4438185829edbbf42b36a710eda4db2f540f794a3a68
-
SSDEEP
12288:CkilPpTWSGETtk42iYAuIkFtvf1Z2JfQDqqFqqFqqJP:DiDPTtk42E6fz20qMqMq
Behavioral task
behavioral1
Sample
834bd88cfcc459b6357c4c0a446c035a_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Targets
-
-
Target
834bd88cfcc459b6357c4c0a446c035a_JaffaCakes118
-
Size
727KB
-
MD5
834bd88cfcc459b6357c4c0a446c035a
-
SHA1
ce72baf9529394b39db2df5afa182d76242fa59b
-
SHA256
d6890b0de0b96906eec7b6970bda85b566d73546fd2a6bc71eef15c0af222997
-
SHA512
f0778b198084dd74e452546d32d70fb6dd7b452f719988ffb983f5341f51200b0e3deee65bb1f951500d4438185829edbbf42b36a710eda4db2f540f794a3a68
-
SSDEEP
12288:CkilPpTWSGETtk42iYAuIkFtvf1Z2JfQDqqFqqFqqJP:DiDPTtk42E6fz20qMqMq
-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Suspicious use of SetThreadContext
-