Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b9f23f0d2b49c14f767125cbaf60bc7c_JaffaCakes118
-
Size
1.0MB
-
Sample
240823-ch92zszdjf
-
MD5
b9f23f0d2b49c14f767125cbaf60bc7c
-
SHA1
ca40591cd0bf4b6b1a5f01dc9b05cd15621b3643
-
SHA256
c569feca597ac68b861f9ee895b274caab0ddff69a9567258af551fbfc4367f0
-
SHA512
a2f1c34b98040b08170f9e8741a071312df09c71d1cd6978dd62c548a1e7af08d5a17e3684784c83a8bd3d42b1bfd33c2a8a279c4b7849abc63a8c2857c72351
-
SSDEEP
24576:e6qOXstzx0ispm3FZRR22CHiyTM0C5sfTnDpCQQaR5C:e6qOSXam37WlBT9XbAQlC
Behavioral task
behavioral1
Sample
b9f23f0d2b49c14f767125cbaf60bc7c_JaffaCakes118.dll
Resource
win7-20240705-en
Malware Config
Targets
-
-
Target
b9f23f0d2b49c14f767125cbaf60bc7c_JaffaCakes118
-
Size
1.0MB
-
MD5
b9f23f0d2b49c14f767125cbaf60bc7c
-
SHA1
ca40591cd0bf4b6b1a5f01dc9b05cd15621b3643
-
SHA256
c569feca597ac68b861f9ee895b274caab0ddff69a9567258af551fbfc4367f0
-
SHA512
a2f1c34b98040b08170f9e8741a071312df09c71d1cd6978dd62c548a1e7af08d5a17e3684784c83a8bd3d42b1bfd33c2a8a279c4b7849abc63a8c2857c72351
-
SSDEEP
24576:e6qOXstzx0ispm3FZRR22CHiyTM0C5sfTnDpCQQaR5C:e6qOSXam37WlBT9XbAQlC
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-