Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
94a896460bf2f4ea832a010ef708430a_JaffaCakes118
-
Size
520KB
-
Sample
240813-zh1jwavfqg
-
MD5
94a896460bf2f4ea832a010ef708430a
-
SHA1
d8f6a5104e1a2745ee8a7d6ffffe6a2026b81950
-
SHA256
50547b3f29aa69fb1d25d3310debbca3a2e48130404e7dcfdd0aa96a37c8d430
-
SHA512
66888c725660f4a340d5ba6b2f26eddf17a438c4fc437dceffa702e38e802e61cc74335373df585ffdb69b62290210f1a20e22b2d11271f5c3c6f9c83505a7f7
-
SSDEEP
12288:PSQSi4OKZ/jIXiyw11XjDb5AwWoUTyPUSuPz:PSI1KFjT7HDbDWTNz
Behavioral task
behavioral1
Sample
94a896460bf2f4ea832a010ef708430a_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
94a896460bf2f4ea832a010ef708430a_JaffaCakes118
-
Size
520KB
-
MD5
94a896460bf2f4ea832a010ef708430a
-
SHA1
d8f6a5104e1a2745ee8a7d6ffffe6a2026b81950
-
SHA256
50547b3f29aa69fb1d25d3310debbca3a2e48130404e7dcfdd0aa96a37c8d430
-
SHA512
66888c725660f4a340d5ba6b2f26eddf17a438c4fc437dceffa702e38e802e61cc74335373df585ffdb69b62290210f1a20e22b2d11271f5c3c6f9c83505a7f7
-
SSDEEP
12288:PSQSi4OKZ/jIXiyw11XjDb5AwWoUTyPUSuPz:PSI1KFjT7HDbDWTNz
-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Suspicious use of SetThreadContext
-