Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...c9.exe

windows7-x64

10

JaffaCakes...c9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6e27da57eb953b5b285e2a8068c1dd69147c06e92c6acb92fe97ee515fb16fc9

  • Size

    1KB

  • MD5

    574472decb54da77022fd05e4aa5e6c1

  • SHA1

    b6532e1083de00796b1e29d74453d06f1e341fee

  • SHA256

    6e27da57eb953b5b285e2a8068c1dd69147c06e92c6acb92fe97ee515fb16fc9

  • SHA512

    9d268953c8828838b95bffcdaf49e4c1b63a796aa09444ab0ad6ebe20747a9010f11606f9e027bcf686f56810ecff7c14e63898ad80e9d68fe148c355d3e8c50

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://175.178.239.127:80/comm/change/RDS3S6X8

Attributes
  • headers Accept: image/*, text/html, application/xhtml+xml Accept-Language: ro-md Accept-Encoding: gzip, compress User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.82 Safari/537.36

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6e27da57eb953b5b285e2a8068c1dd69147c06e92c6acb92fe97ee515fb16fc9
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections