Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
03ba0d5523356aa0fd71fa7968f379b8_JaffaCakes118
-
Size
351KB
-
Sample
241001-ah1r7swakh
-
MD5
03ba0d5523356aa0fd71fa7968f379b8
-
SHA1
da21a08cfdad488dd5efe50fc5d6968f177cb1ff
-
SHA256
60d944fc9d35d169fd198227eb7e9798433f4fbdd0fd6fe1a5ab19d5aa5951c7
-
SHA512
0b88231bb2b51008ceed877234bf299ef9d9e44544eb96650ea729e62311a7250751dbb5af62d99e149bd8edd305aef0d64fef0e108c068400129fe2cca514d2
-
SSDEEP
6144:78lhUbjntPDo/OQlpKz8O6KEO+MTKbJ4RQjjJxEI0Xh7PblyzY:Awt7oPaz8Vtxy4jFQ7jlys
Static task
static1
Behavioral task
behavioral1
Sample
03ba0d5523356aa0fd71fa7968f379b8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03ba0d5523356aa0fd71fa7968f379b8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
03ba0d5523356aa0fd71fa7968f379b8_JaffaCakes118
-
Size
351KB
-
MD5
03ba0d5523356aa0fd71fa7968f379b8
-
SHA1
da21a08cfdad488dd5efe50fc5d6968f177cb1ff
-
SHA256
60d944fc9d35d169fd198227eb7e9798433f4fbdd0fd6fe1a5ab19d5aa5951c7
-
SHA512
0b88231bb2b51008ceed877234bf299ef9d9e44544eb96650ea729e62311a7250751dbb5af62d99e149bd8edd305aef0d64fef0e108c068400129fe2cca514d2
-
SSDEEP
6144:78lhUbjntPDo/OQlpKz8O6KEO+MTKbJ4RQjjJxEI0Xh7PblyzY:Awt7oPaz8Vtxy4jFQ7jlys
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-