Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

sample.exe

windows7-x64

10

sample.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6c527a9e7bd5fff14bb9eee2b08b3b70

  • Size

    16KB

  • MD5

    6c527a9e7bd5fff14bb9eee2b08b3b70

  • SHA1

    59716b86d136ac284b2c62754e2082ca7e33ee3f

  • SHA256

    a7c87bea2e797dfe4af4a97a0e23aa3625e24f58d5e0b9067558fb8dab6f42cd

  • SHA512

    8aa847ee779a5177f0b9481396f6794bb35421f85f1f609507ce8205cfa0bdebb811f2fe3ccd52b02448a36d5f87a5a987df19b3addcc23af5e130df87a186b5

  • SSDEEP

    384:tgGlAueJ9xlctOZnoVfZ411oSclru2kLwQ51s:C2AuAPQOZoVfZ2cVulVw

Score
10/10
hacked by faresnjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed By Fares

C2

yoryounes.no-ip.biz:1177

Mutex

785d05353c980cbe0ee2249e87829808

Attributes
  • reg_key

    785d05353c980cbe0ee2249e87829808

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6c527a9e7bd5fff14bb9eee2b08b3b70
    .gz
  • sample
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections