Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

8b1b4d9e80...18.exe

windows7-x64

7

8b1b4d9e80...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b1b4d9e802ff39b2ce3ac824d1cfdd7_JaffaCakes118

  • Size

    658KB

  • Sample

    240811-t1x9kssaqh

  • MD5

    8b1b4d9e802ff39b2ce3ac824d1cfdd7

  • SHA1

    f8a82bb94742cf478d1646954558b429f06e46c0

  • SHA256

    01ea3af979085e335918a76e6639070b9c6283359356bbd83560dc3b15b6b3d3

  • SHA512

    2867ab2e31245b98a76a87d1ad23da6bd7e7a5fc0c3b8a45732a921ae09329ae676406ef8c04839ce9d282f12e517307409e79f7bc8df8fba43307585e1a52ce

  • SSDEEP

    12288:j1gjw98k28ynrRvMNSI9fCwfyNodQp9mTcyOLaO8trrhLAY:jbOj7FvMN19fltd9TcDIxAY

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      8b1b4d9e802ff39b2ce3ac824d1cfdd7_JaffaCakes118

    • Size

      658KB

    • MD5

      8b1b4d9e802ff39b2ce3ac824d1cfdd7

    • SHA1

      f8a82bb94742cf478d1646954558b429f06e46c0

    • SHA256

      01ea3af979085e335918a76e6639070b9c6283359356bbd83560dc3b15b6b3d3

    • SHA512

      2867ab2e31245b98a76a87d1ad23da6bd7e7a5fc0c3b8a45732a921ae09329ae676406ef8c04839ce9d282f12e517307409e79f7bc8df8fba43307585e1a52ce

    • SSDEEP

      12288:j1gjw98k28ynrRvMNSI9fCwfyNodQp9mTcyOLaO8trrhLAY:jbOj7FvMN19fltd9TcDIxAY

    Score
    7/10
    discoveryevasionthemida

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks