Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f4e0dd059622255ab0d1cb050c562b6e_JaffaCakes118
-
Size
267KB
-
Sample
240925-bwkhtawhrr
-
MD5
f4e0dd059622255ab0d1cb050c562b6e
-
SHA1
2f8a3dff0a14a2520e991458ef8eb919a8bb34b2
-
SHA256
3f6a01122ba08bbb943b745c16ca35378f9555f11a37287a4bf45f5b0042618a
-
SHA512
1053eec8208630af2aee3a12ae9f6e73749ff94587600c436d6e2776af5a02938bb8e7ab3c8d568b7449083ee99636ae6db085c1c201d47e1cf8e07b09136979
-
SSDEEP
6144:jipFwArEWyXvXpqo2pZ+dqtWRmnUGj9vzAGEqN38:jKFwArEWyfUJlK6+GEW3
Static task
static1
Behavioral task
behavioral1
Sample
f4e0dd059622255ab0d1cb050c562b6e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4e0dd059622255ab0d1cb050c562b6e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f4e0dd059622255ab0d1cb050c562b6e_JaffaCakes118
-
Size
267KB
-
MD5
f4e0dd059622255ab0d1cb050c562b6e
-
SHA1
2f8a3dff0a14a2520e991458ef8eb919a8bb34b2
-
SHA256
3f6a01122ba08bbb943b745c16ca35378f9555f11a37287a4bf45f5b0042618a
-
SHA512
1053eec8208630af2aee3a12ae9f6e73749ff94587600c436d6e2776af5a02938bb8e7ab3c8d568b7449083ee99636ae6db085c1c201d47e1cf8e07b09136979
-
SSDEEP
6144:jipFwArEWyXvXpqo2pZ+dqtWRmnUGj9vzAGEqN38:jKFwArEWyfUJlK6+GEW3
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-