Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fcd5e75a21b6a88fc683c9310034622a_JaffaCakes118
-
Size
4.7MB
-
Sample
240928-wgmd3sycln
-
MD5
fcd5e75a21b6a88fc683c9310034622a
-
SHA1
87cbcaf5d4bc6544b56a8d205b1322018450ad7e
-
SHA256
a54860b3482a3e5312a6f7881b02c46501804bebe0a807e6e1a365b24e58cf06
-
SHA512
f1954575ac77df385e6fc12efb0f04526af437454a1981004138bea883e24e11f737c87d607e41c7b26cc63e6b7ebbf6babc82a74e053c65f8b649f02e5544ed
-
SSDEEP
98304:YXfkMf4uBFeJ1QleIDHgbAfmQtPUpNCp5DORqMtaUljVUPXnCkyVtFN1M5:+vQuneJ1QLHavQSpNCPD8qMQUlq4tFNK
Behavioral task
behavioral1
Sample
fcd5e75a21b6a88fc683c9310034622a_JaffaCakes118.exe
Resource
win7-20240729-en
Malware Config
Targets
-
-
Target
fcd5e75a21b6a88fc683c9310034622a_JaffaCakes118
-
Size
4.7MB
-
MD5
fcd5e75a21b6a88fc683c9310034622a
-
SHA1
87cbcaf5d4bc6544b56a8d205b1322018450ad7e
-
SHA256
a54860b3482a3e5312a6f7881b02c46501804bebe0a807e6e1a365b24e58cf06
-
SHA512
f1954575ac77df385e6fc12efb0f04526af437454a1981004138bea883e24e11f737c87d607e41c7b26cc63e6b7ebbf6babc82a74e053c65f8b649f02e5544ed
-
SSDEEP
98304:YXfkMf4uBFeJ1QleIDHgbAfmQtPUpNCp5DORqMtaUljVUPXnCkyVtFN1M5:+vQuneJ1QLHavQSpNCPD8qMQUlq4tFNK
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-