Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...c4.exe

windows7-x64

10

JaffaCakes...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6a86fa4caf935d582001c1a4b3a2cec4

  • Size

    345KB

  • MD5

    6a86fa4caf935d582001c1a4b3a2cec4

  • SHA1

    f13f84862e118adb7558b76b24be1f9390e61872

  • SHA256

    ce3c83cb9c09169ed7b2b4f5cef17eaa5d24f0ba11ea73755591515392342b15

  • SHA512

    271df45609e0d5c9fa24d2463f22fa25f1b2e8007cc62d9323b7192c5296152593d8c7103e00f840b6b1cd40812eba8ee0fa0e8a8897f918fec0959fac76a7cb

  • SSDEEP

    6144:xmcD66RY5JGmrpQsK3RD2u270jupCJsCxC3ID6hG:EcD66jZ2zkPaCxn8

Score
10/10
upxservercybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

Server

C2

127.0.0.1:4925

jlk.no-ip.biz:4925
Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    Microsoft_KB57H43

  • install_file

    Microsoft_KB57H43.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    This crack is for a diferent version of WINDOWS. Please visit http://www.warez-bb.org/ and download the correct crack for your windows operating system. Continue anyways?

  • message_box_title

    Hide my IP 2009 ERROR

  • password

    abcd1234

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

  • Cybergate family
    cybergate
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6a86fa4caf935d582001c1a4b3a2cec4
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.