Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...30.exe

windows7-x64

10

JaffaCakes...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0168ed53164a66c16ca9baabcc916b30

  • Size

    1.4MB

  • Sample

    241231-c6dcxssrbx

  • MD5

    0168ed53164a66c16ca9baabcc916b30

  • SHA1

    15bf3131983057af2e804f286958ded02e48d632

  • SHA256

    f4025f7b532ab5b16a9a9e2759673e0692510e5e39453ea3281368c036dcc0dc

  • SHA512

    a5f224d03fd5518fec97f4ef1a3f88cb810f6760a64ddd3585c3305c9b5e55d6c2a72d29048d379f2cdaab47ec6ba9e29e4d7bc5b21e266c60d97edbc8d44248

  • SSDEEP

    24576:6HNF3HcAnuW7FwFU4yHgrQyAqx+3EzCqO2Uz1L7pryC1dhV3DxfQyRrFfC:4F34MFpk1nGqE1hr31pdoQRq

Score
10/10
salitybackdoordiscoveryupx

Malware Config

Targets

    • Target

      JaffaCakes118_0168ed53164a66c16ca9baabcc916b30

    • Size

      1.4MB

    • MD5

      0168ed53164a66c16ca9baabcc916b30

    • SHA1

      15bf3131983057af2e804f286958ded02e48d632

    • SHA256

      f4025f7b532ab5b16a9a9e2759673e0692510e5e39453ea3281368c036dcc0dc

    • SHA512

      a5f224d03fd5518fec97f4ef1a3f88cb810f6760a64ddd3585c3305c9b5e55d6c2a72d29048d379f2cdaab47ec6ba9e29e4d7bc5b21e266c60d97edbc8d44248

    • SSDEEP

      24576:6HNF3HcAnuW7FwFU4yHgrQyAqx+3EzCqO2Uz1L7pryC1dhV3DxfQyRrFfC:4F34MFpk1nGqE1hr31pdoQRq

    Score
    10/10
    salitybackdoorupxdiscovery

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • Sality family

      sality

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks