Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

a404dcbcba...18.exe

windows7-x64

7

a404dcbcba...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a404dcbcbaed177870053941c47496db_JaffaCakes118

  • Size

    3.1MB

  • Sample

    240817-y8tnksveqa

  • MD5

    a404dcbcbaed177870053941c47496db

  • SHA1

    45ddebc78e4bf312e98d3ec2581c6b6f722baa99

  • SHA256

    1e08c8afa35ac3cc2ada0b2609d86e2381e221159fc7c18f73133997c94cdb98

  • SHA512

    e5c06b1b5d1e3456219681b72c806e9c8ddaaf962092478834d7b2a222091ac7e24a41a1982d1a80de9529255532cb8ab1c97b57b2f861df189e05b612cc581b

  • SSDEEP

    98304:TmoOxAWRyq0LfpEbKz0ifuiKY8Pcuj0h6C+UW:LoyqSfiEfB18PcuAc

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      a404dcbcbaed177870053941c47496db_JaffaCakes118

    • Size

      3.1MB

    • MD5

      a404dcbcbaed177870053941c47496db

    • SHA1

      45ddebc78e4bf312e98d3ec2581c6b6f722baa99

    • SHA256

      1e08c8afa35ac3cc2ada0b2609d86e2381e221159fc7c18f73133997c94cdb98

    • SHA512

      e5c06b1b5d1e3456219681b72c806e9c8ddaaf962092478834d7b2a222091ac7e24a41a1982d1a80de9529255532cb8ab1c97b57b2f861df189e05b612cc581b

    • SSDEEP

      98304:TmoOxAWRyq0LfpEbKz0ifuiKY8Pcuj0h6C+UW:LoyqSfiEfB18PcuAc

    Score
    7/10
    discoveryevasionthemida

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks