Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a78e31f8dd0f0bdfba3ac41a9aca0e74_JaffaCakes118
-
Size
749KB
-
Sample
240818-vzwvssybrq
-
MD5
a78e31f8dd0f0bdfba3ac41a9aca0e74
-
SHA1
911d6b6935186af44c5b025f5c865d1868175ba0
-
SHA256
4de51b65f656de8832f10d888b9e00cf514623ebe047eca595a1afd94583fb13
-
SHA512
b2c6dd309f8b9ef2f1571bdb1e90e06c91047b505deb58d505b84ad146c541ff92604ab5bc454f7ec834398d402ae7e78377c634c8bd43f1ed5f7a3f15b1af86
-
SSDEEP
12288:7zGqvIontiXisXENKxAQkSknc9NLSCmlinPkyCrljtlESJk9v+LZJ8Ebm8qln:7zyontiXTVavSzLZJkyaZtySJk9v+Lw/
Static task
static1
Behavioral task
behavioral1
Sample
a78e31f8dd0f0bdfba3ac41a9aca0e74_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a78e31f8dd0f0bdfba3ac41a9aca0e74_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
a78e31f8dd0f0bdfba3ac41a9aca0e74_JaffaCakes118
-
Size
749KB
-
MD5
a78e31f8dd0f0bdfba3ac41a9aca0e74
-
SHA1
911d6b6935186af44c5b025f5c865d1868175ba0
-
SHA256
4de51b65f656de8832f10d888b9e00cf514623ebe047eca595a1afd94583fb13
-
SHA512
b2c6dd309f8b9ef2f1571bdb1e90e06c91047b505deb58d505b84ad146c541ff92604ab5bc454f7ec834398d402ae7e78377c634c8bd43f1ed5f7a3f15b1af86
-
SSDEEP
12288:7zGqvIontiXisXENKxAQkSknc9NLSCmlinPkyCrljtlESJk9v+LZJ8Ebm8qln:7zyontiXTVavSzLZJkyaZtySJk9v+Lw/
Score7/10-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-