Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
eaf0b16d7b5fa059bf4bc3338aa45d85_JaffaCakes118
-
Size
239KB
-
Sample
240410-ndkgbadf96
-
MD5
eaf0b16d7b5fa059bf4bc3338aa45d85
-
SHA1
1e98641e0f98d7e47a72461df9a90bc3755cb5ee
-
SHA256
13acb2a0cfc213abdbb8f42ae25b2def0c11116aead93ac2cb75b2d965cbb682
-
SHA512
6092fd178b0ca7d57889e31a432036b4b47619ab2f7d1c701dc68d7551aaa47f17e94314650640749971247ad913593179647e7a28e134fb653b98d68748312b
-
SSDEEP
3072:R410tNnOvYL/XcPBsLBkIcyYpZ0OFGkw+ALtjHyN3yeW8Wf8NFldNnD7SXlDfRVW:u2nGQ/WeJcyCZzFXsqo8DSX9fRb
Static task
static1
Behavioral task
behavioral1
Sample
eaf0b16d7b5fa059bf4bc3338aa45d85_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eaf0b16d7b5fa059bf4bc3338aa45d85_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
eaf0b16d7b5fa059bf4bc3338aa45d85_JaffaCakes118
-
Size
239KB
-
MD5
eaf0b16d7b5fa059bf4bc3338aa45d85
-
SHA1
1e98641e0f98d7e47a72461df9a90bc3755cb5ee
-
SHA256
13acb2a0cfc213abdbb8f42ae25b2def0c11116aead93ac2cb75b2d965cbb682
-
SHA512
6092fd178b0ca7d57889e31a432036b4b47619ab2f7d1c701dc68d7551aaa47f17e94314650640749971247ad913593179647e7a28e134fb653b98d68748312b
-
SSDEEP
3072:R410tNnOvYL/XcPBsLBkIcyYpZ0OFGkw+ALtjHyN3yeW8Wf8NFldNnD7SXlDfRVW:u2nGQ/WeJcyCZzFXsqo8DSX9fRb
Score10/10-
Modifies WinLogon for persistence
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-