Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b53cc4f65b735062ae79b1c39d302f90_JaffaCakes118
-
Size
5.3MB
-
Sample
240821-129sbstbmh
-
MD5
b53cc4f65b735062ae79b1c39d302f90
-
SHA1
0bc8bb5861f68c145be4635caca1739ab458d51c
-
SHA256
48f90441924d1612a8deb81509bf7461460449f2217f13c4907488774b035889
-
SHA512
5a2ffbc2a839f48e32f513b6400007466301959016a43cfbb3e483a0afeacd92c2b14c88740c90f0ccdd0ae202407c03db07c3f7da27a051a98ea08bea054581
-
SSDEEP
98304:Y3SMAvbSelCz6cY7KxM3THwSe+pmZwcmuNq0ZL1HgTaiF2rYIz0IFs8h2L6Bx:IeeIo6xeSTq+oZwc1fLezSbzW8ML
Static task
static1
Behavioral task
behavioral1
Sample
b53cc4f65b735062ae79b1c39d302f90_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b53cc4f65b735062ae79b1c39d302f90_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b53cc4f65b735062ae79b1c39d302f90_JaffaCakes118
-
Size
5.3MB
-
MD5
b53cc4f65b735062ae79b1c39d302f90
-
SHA1
0bc8bb5861f68c145be4635caca1739ab458d51c
-
SHA256
48f90441924d1612a8deb81509bf7461460449f2217f13c4907488774b035889
-
SHA512
5a2ffbc2a839f48e32f513b6400007466301959016a43cfbb3e483a0afeacd92c2b14c88740c90f0ccdd0ae202407c03db07c3f7da27a051a98ea08bea054581
-
SSDEEP
98304:Y3SMAvbSelCz6cY7KxM3THwSe+pmZwcmuNq0ZL1HgTaiF2rYIz0IFs8h2L6Bx:IeeIo6xeSTq+oZwc1fLezSbzW8ML
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-