Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
02b3325b886d11bcb59bd91f4a66d02d_JaffaCakes118
-
Size
2.2MB
-
Sample
240930-w16bastakf
-
MD5
02b3325b886d11bcb59bd91f4a66d02d
-
SHA1
1e54f77460c512f320f761ef47cbf4936e267a3b
-
SHA256
b109878180698ad0d281bd9af106291ae13b109433d76c0a01f4b5b7c1cef37e
-
SHA512
77cc0936a28c54c79688af650acffd0a41159e82ab14538e503d4af61464d47a30b4022fabf928d13209433fe1da42b8ae2f46ff27a34d95d9e122f95b92ad48
-
SSDEEP
24576:3y8pZnlwtHNN0K+sToVvQg+4Y7LDD9fDZN9EGJY3tPp033gxnwRDySFZwPObm:3ZnlUN0K+304S7RX9ERyw69x
Static task
static1
Behavioral task
behavioral1
Sample
02b3325b886d11bcb59bd91f4a66d02d_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
02b3325b886d11bcb59bd91f4a66d02d_JaffaCakes118
-
Size
2.2MB
-
MD5
02b3325b886d11bcb59bd91f4a66d02d
-
SHA1
1e54f77460c512f320f761ef47cbf4936e267a3b
-
SHA256
b109878180698ad0d281bd9af106291ae13b109433d76c0a01f4b5b7c1cef37e
-
SHA512
77cc0936a28c54c79688af650acffd0a41159e82ab14538e503d4af61464d47a30b4022fabf928d13209433fe1da42b8ae2f46ff27a34d95d9e122f95b92ad48
-
SSDEEP
24576:3y8pZnlwtHNN0K+sToVvQg+4Y7LDD9fDZN9EGJY3tPp033gxnwRDySFZwPObm:3ZnlUN0K+304S7RX9ERyw69x
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-