Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1b9cc268b4d1f6950ef4db9bfbd18c61_JaffaCakes118
-
Size
92KB
-
Sample
240701-rlnqgszcjm
-
MD5
1b9cc268b4d1f6950ef4db9bfbd18c61
-
SHA1
8b5c8ce07bd32c3c4f7dae7da902dc9c1740ca79
-
SHA256
fd6ff5584bd51143a1f4721d046d6a564b64449de3d7cc797a40a1a6086bc449
-
SHA512
039dee67d587196a5efc3fb621960e5fb8ea0ee0b43cb8816452bf7cfc2f317c6c406e00d0e23c335a6a8216041586030706397b04ea209ed29f94d27ea1634a
-
SSDEEP
1536:NV67mIKvzbAM6FGgkrYDy2/UTQ+mPTrz9xp4eenlduOHsTofwTRMki:r8mIKbbAFUgkneUTqrrz93gzaofwdMki
Static task
static1
Behavioral task
behavioral1
Sample
1b9cc268b4d1f6950ef4db9bfbd18c61_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1b9cc268b4d1f6950ef4db9bfbd18c61_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
1b9cc268b4d1f6950ef4db9bfbd18c61_JaffaCakes118
-
Size
92KB
-
MD5
1b9cc268b4d1f6950ef4db9bfbd18c61
-
SHA1
8b5c8ce07bd32c3c4f7dae7da902dc9c1740ca79
-
SHA256
fd6ff5584bd51143a1f4721d046d6a564b64449de3d7cc797a40a1a6086bc449
-
SHA512
039dee67d587196a5efc3fb621960e5fb8ea0ee0b43cb8816452bf7cfc2f317c6c406e00d0e23c335a6a8216041586030706397b04ea209ed29f94d27ea1634a
-
SSDEEP
1536:NV67mIKvzbAM6FGgkrYDy2/UTQ+mPTrz9xp4eenlduOHsTofwTRMki:r8mIKbbAFUgkneUTqrrz93gzaofwdMki
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-