Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e3e78357f0cc2232cde1e7f997327db2_JaffaCakes118
-
Size
301KB
-
Sample
241212-ayawqatqet
-
MD5
e3e78357f0cc2232cde1e7f997327db2
-
SHA1
a3ece7efa77d49b76fb17e2cdb8c8c95708a0913
-
SHA256
efc25b918dd31687dd5edb36bac670ae1a10213b89ea0a9aa99c60f3cb02c4bf
-
SHA512
e3ee53352f9c9aed60d470d3ebe4fe294c2f5b2f5fe987f7cbea40e278433e637a41131c99f8b70f65dc3e5d1ec1291c10be8db8d16da969bf9ea48fb76b3f34
-
SSDEEP
6144:I3lbdiKJKTloAdbvaO8okZuDiXU10bhmtNash4Ij:y3KTloAFz8oMuDiZkNlaIj
Static task
static1
Behavioral task
behavioral1
Sample
e3e78357f0cc2232cde1e7f997327db2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e3e78357f0cc2232cde1e7f997327db2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
e3e78357f0cc2232cde1e7f997327db2_JaffaCakes118
-
Size
301KB
-
MD5
e3e78357f0cc2232cde1e7f997327db2
-
SHA1
a3ece7efa77d49b76fb17e2cdb8c8c95708a0913
-
SHA256
efc25b918dd31687dd5edb36bac670ae1a10213b89ea0a9aa99c60f3cb02c4bf
-
SHA512
e3ee53352f9c9aed60d470d3ebe4fe294c2f5b2f5fe987f7cbea40e278433e637a41131c99f8b70f65dc3e5d1ec1291c10be8db8d16da969bf9ea48fb76b3f34
-
SSDEEP
6144:I3lbdiKJKTloAdbvaO8okZuDiXU10bhmtNash4Ij:y3KTloAFz8oMuDiZkNlaIj
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Suspicious use of SetThreadContext
-