Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

b64b9829be...18.exe

windows7-x64

9

b64b9829be...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b64b9829be04d3651f1ff1fab7aa51dc_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240822-er95fsxgpg

  • MD5

    b64b9829be04d3651f1ff1fab7aa51dc

  • SHA1

    9b909db2f631c8c5046e387a7f924f4319a3f345

  • SHA256

    3cc54a630c9072d21e7882f5c088e82910e81078bcdacded72f05cec13f3f707

  • SHA512

    7b5e8c5133718833bc0b46ae9cd207bf5a5feae625aada7f8f3ba8b2955e822807181c67d297e2e14fc6f47c0edac602a5226fae90d2e6cc9dee8bfab8b84496

  • SSDEEP

    24576:jgLPBR6ai3HxEqnNgAB9z1mDLNOCuaDA0V8xPE7yJXn8Byh:iROHL1mDACuaDA2wLM

Score
9/10
discoveryevasionupx

Malware Config

Targets

    • Target

      b64b9829be04d3651f1ff1fab7aa51dc_JaffaCakes118

    • Size

      1.4MB

    • MD5

      b64b9829be04d3651f1ff1fab7aa51dc

    • SHA1

      9b909db2f631c8c5046e387a7f924f4319a3f345

    • SHA256

      3cc54a630c9072d21e7882f5c088e82910e81078bcdacded72f05cec13f3f707

    • SHA512

      7b5e8c5133718833bc0b46ae9cd207bf5a5feae625aada7f8f3ba8b2955e822807181c67d297e2e14fc6f47c0edac602a5226fae90d2e6cc9dee8bfab8b84496

    • SSDEEP

      24576:jgLPBR6ai3HxEqnNgAB9z1mDLNOCuaDA0V8xPE7yJXn8Byh:iROHL1mDACuaDA2wLM

    Score
    9/10
    discoveryevasionupx

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks