Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b58e5addd131b8207aad707042a2d4fe_JaffaCakes118
-
Size
211KB
-
Sample
240821-31hcss1fmj
-
MD5
b58e5addd131b8207aad707042a2d4fe
-
SHA1
565b3ee99ae2263b2f0f3613b5b66eda0a1254f8
-
SHA256
bf3312388585513efa90a4b2174b1f274a7b937983d0a1f09e5ef233b22e5fcd
-
SHA512
1be9a9a03a0484db11cec87080e4f2dc3c1867c0636a6706fedfa677dcf6bb5a5a1ffe4249f9948df0aa65dcdc65c8e8cf465745be0e020a74f895a86081ec03
-
SSDEEP
6144:dOi91glXpWtPFjCn/JoF6nPRNIPgt19dFjl:Ii9mX4KnxoFqRNDTVJ
Static task
static1
Behavioral task
behavioral1
Sample
b58e5addd131b8207aad707042a2d4fe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b58e5addd131b8207aad707042a2d4fe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b58e5addd131b8207aad707042a2d4fe_JaffaCakes118
-
Size
211KB
-
MD5
b58e5addd131b8207aad707042a2d4fe
-
SHA1
565b3ee99ae2263b2f0f3613b5b66eda0a1254f8
-
SHA256
bf3312388585513efa90a4b2174b1f274a7b937983d0a1f09e5ef233b22e5fcd
-
SHA512
1be9a9a03a0484db11cec87080e4f2dc3c1867c0636a6706fedfa677dcf6bb5a5a1ffe4249f9948df0aa65dcdc65c8e8cf465745be0e020a74f895a86081ec03
-
SSDEEP
6144:dOi91glXpWtPFjCn/JoF6nPRNIPgt19dFjl:Ii9mX4KnxoFqRNDTVJ
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-