Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fb5500c06ed22a52c1ed34dc2b4c5372_JaffaCakes118
-
Size
305KB
-
Sample
240928-c1l3wasdnm
-
MD5
fb5500c06ed22a52c1ed34dc2b4c5372
-
SHA1
9a3574f6e77eba9f22aca8bc09a1cc0dadb86009
-
SHA256
8ca4b47ae9a0fad5b1aa4b3a2e368fa0938491945a70b888c5c4114914efe7d6
-
SHA512
e64687367b6ea1d6072d867214f1e59173661b0f62c310ec02097f2b17ff74d8bcdf7fe8c934811b8bd8442c25f7d0d475452e3bbec6b2a7f48343cde02e0df9
-
SSDEEP
6144:5GSztT72Y0SfzinYKTY1SQshfRPVQe1MZkIYSccr7wbstObPECYeixlYGicUn:5Gqh7SSGYsY1UMqMZJYSN7wbstOb8fvY
Static task
static1
Behavioral task
behavioral1
Sample
fb5500c06ed22a52c1ed34dc2b4c5372_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb5500c06ed22a52c1ed34dc2b4c5372_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
fb5500c06ed22a52c1ed34dc2b4c5372_JaffaCakes118
-
Size
305KB
-
MD5
fb5500c06ed22a52c1ed34dc2b4c5372
-
SHA1
9a3574f6e77eba9f22aca8bc09a1cc0dadb86009
-
SHA256
8ca4b47ae9a0fad5b1aa4b3a2e368fa0938491945a70b888c5c4114914efe7d6
-
SHA512
e64687367b6ea1d6072d867214f1e59173661b0f62c310ec02097f2b17ff74d8bcdf7fe8c934811b8bd8442c25f7d0d475452e3bbec6b2a7f48343cde02e0df9
-
SSDEEP
6144:5GSztT72Y0SfzinYKTY1SQshfRPVQe1MZkIYSccr7wbstObPECYeixlYGicUn:5Gqh7SSGYsY1UMqMZJYSN7wbstOb8fvY
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-