Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
06daa59ddbc7ac4a32d68392b198c544_JaffaCakes118
-
Size
156KB
-
Sample
240429-fghg5abb8x
-
MD5
06daa59ddbc7ac4a32d68392b198c544
-
SHA1
63ee78c881f586b47d0c9367f594c3fa816e5252
-
SHA256
3b8a3207308627a9b0f0799f3c943ec93902d4871c3ed5ab2d3b4ca41f288016
-
SHA512
06ad7b1ca8e81a009913fea045053f99baa3e9f524872db744f6275ac511ce16ae5c4a03257253eff48ac772024aa546769428d5a0ce0c5ef6bf36be2a75c6e3
-
SSDEEP
3072:X1B31bdBob2QX+g4ETj3SCfOUHgUQ+UnlPMWxEvlmbgn9yqeMWycAd8l:X731bdBaB+gp3BOqLQ+UlIvlmbgn9VJW
Static task
static1
Behavioral task
behavioral1
Sample
06daa59ddbc7ac4a32d68392b198c544_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
06daa59ddbc7ac4a32d68392b198c544_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
06daa59ddbc7ac4a32d68392b198c544_JaffaCakes118
-
Size
156KB
-
MD5
06daa59ddbc7ac4a32d68392b198c544
-
SHA1
63ee78c881f586b47d0c9367f594c3fa816e5252
-
SHA256
3b8a3207308627a9b0f0799f3c943ec93902d4871c3ed5ab2d3b4ca41f288016
-
SHA512
06ad7b1ca8e81a009913fea045053f99baa3e9f524872db744f6275ac511ce16ae5c4a03257253eff48ac772024aa546769428d5a0ce0c5ef6bf36be2a75c6e3
-
SSDEEP
3072:X1B31bdBob2QX+g4ETj3SCfOUHgUQ+UnlPMWxEvlmbgn9yqeMWycAd8l:X731bdBaB+gp3BOqLQ+UlIvlmbgn9VJW
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory
-