Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
071a6b8d1a1e42ac0bf4fe79268949dc_JaffaCakes118
-
Size
759KB
-
Sample
241001-x53lmszfkf
-
MD5
071a6b8d1a1e42ac0bf4fe79268949dc
-
SHA1
229052e5e2190de214734363afd334b01f65eba8
-
SHA256
dccc600f727069117f417b1ff1cde324e6e373959860aea51d6d5692db89de3c
-
SHA512
acb736a9b01be10cb4a1746715e9e0ea0730fbffec6bc7b83ba9034afabb604541326b0a81bc79498ed637d645826d37e6530f9b73a87324b6b5dd085565ef1a
-
SSDEEP
12288:CFG0wJYQ8qnBK80dynnXTBZ1VuVlwxulUL9OwFznKQ+80S/byipwvLsWQ9ww+9Wf:CFNQ8KF4ynX9Z1VuVlwxumL9R+LsWQ9v
Behavioral task
behavioral1
Sample
071a6b8d1a1e42ac0bf4fe79268949dc_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Targets
-
-
Target
071a6b8d1a1e42ac0bf4fe79268949dc_JaffaCakes118
-
Size
759KB
-
MD5
071a6b8d1a1e42ac0bf4fe79268949dc
-
SHA1
229052e5e2190de214734363afd334b01f65eba8
-
SHA256
dccc600f727069117f417b1ff1cde324e6e373959860aea51d6d5692db89de3c
-
SHA512
acb736a9b01be10cb4a1746715e9e0ea0730fbffec6bc7b83ba9034afabb604541326b0a81bc79498ed637d645826d37e6530f9b73a87324b6b5dd085565ef1a
-
SSDEEP
12288:CFG0wJYQ8qnBK80dynnXTBZ1VuVlwxulUL9OwFznKQ+80S/byipwvLsWQ9ww+9Wf:CFNQ8KF4ynX9Z1VuVlwxumL9R+LsWQ9v
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-