Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ff3f8d8d534839490b926ba04857a27a_JaffaCakes118
-
Size
311KB
-
Sample
240929-ywmdqssbje
-
MD5
ff3f8d8d534839490b926ba04857a27a
-
SHA1
d9382317b6dbc1d71554dc807a6de8e8b909546d
-
SHA256
bb319959ba3c77be2a484c3ddc1204f23d3f26e4959a09ed5e63a0bb9cdc7882
-
SHA512
84dda57515832e16ffba35d8d7e1e2311d69528cc35161f41717fa963c8decb7ef3b0cae6ca8e24309a93c69fafff92fe0f68f75593a98c5b3f9622dc2ec1a87
-
SSDEEP
6144:nS/3wVyBel40pP1MHLdL1hALe+2NirdrQdZnwUKD0F:nm3myO4w1MdoLT2NKcVws
Static task
static1
Behavioral task
behavioral1
Sample
ff3f8d8d534839490b926ba04857a27a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff3f8d8d534839490b926ba04857a27a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ff3f8d8d534839490b926ba04857a27a_JaffaCakes118
-
Size
311KB
-
MD5
ff3f8d8d534839490b926ba04857a27a
-
SHA1
d9382317b6dbc1d71554dc807a6de8e8b909546d
-
SHA256
bb319959ba3c77be2a484c3ddc1204f23d3f26e4959a09ed5e63a0bb9cdc7882
-
SHA512
84dda57515832e16ffba35d8d7e1e2311d69528cc35161f41717fa963c8decb7ef3b0cae6ca8e24309a93c69fafff92fe0f68f75593a98c5b3f9622dc2ec1a87
-
SSDEEP
6144:nS/3wVyBel40pP1MHLdL1hALe+2NirdrQdZnwUKD0F:nm3myO4w1MdoLT2NKcVws
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-