Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2590914ef41537fd271924cf9ed4b0c1_JaffaCakes118
-
Size
443KB
-
Sample
241008-z3676axcpl
-
MD5
2590914ef41537fd271924cf9ed4b0c1
-
SHA1
41c44c8f2259d2eadf8eb4479725b2bc810a1454
-
SHA256
2e4fcf42a1f8e49e6620a9d64030cdd97f88bd9aa7fc11767bb8f4d9a174883b
-
SHA512
26c98ca5cad2def20858d115efc039cec89073c3095957a53fb086ef72d4ad882e450691067f4adf9eb52529f8b68e0b3881e24f6b2f55c36b1aa79bc4337abe
-
SSDEEP
6144:zbzzv2J/jDlI/qtPW1yzF3ty5w9GhxQqdaV2i/eRo6J5ln6ZdJ71Se2N:uaSQMz8QqdXi/eRo6Th3
Static task
static1
Behavioral task
behavioral1
Sample
2590914ef41537fd271924cf9ed4b0c1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2590914ef41537fd271924cf9ed4b0c1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2590914ef41537fd271924cf9ed4b0c1_JaffaCakes118
-
Size
443KB
-
MD5
2590914ef41537fd271924cf9ed4b0c1
-
SHA1
41c44c8f2259d2eadf8eb4479725b2bc810a1454
-
SHA256
2e4fcf42a1f8e49e6620a9d64030cdd97f88bd9aa7fc11767bb8f4d9a174883b
-
SHA512
26c98ca5cad2def20858d115efc039cec89073c3095957a53fb086ef72d4ad882e450691067f4adf9eb52529f8b68e0b3881e24f6b2f55c36b1aa79bc4337abe
-
SSDEEP
6144:zbzzv2J/jDlI/qtPW1yzF3ty5w9GhxQqdaV2i/eRo6J5ln6ZdJ71Se2N:uaSQMz8QqdXi/eRo6Th3
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-