Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2e3eb67d4a6d51da81bb2900c64675ef_JaffaCakes118
-
Size
100KB
-
Sample
240708-3n584axdrf
-
MD5
2e3eb67d4a6d51da81bb2900c64675ef
-
SHA1
c01e5e7b1574fabc276ba775b0f634cc76c9674f
-
SHA256
79fe65670e2d0708a19e34365521de1d76c366219602d7da86502fe848b906db
-
SHA512
471604a3e0742d1f49bac2f4498a08a1f8a51d5776392843d41b242e5d8a98146c530389cf3f65aa10dd884493a2122ba02f17eb7e13c11d99bd459a68b70764
-
SSDEEP
1536:Ghsq/bmXYJK2qCqT7GXpVL9wH0oHdpLC5IxMg0Yl5Lgo4zHYRIA:GbmIJK2NpVK0o9pAIxx0YPLgo47Y
Static task
static1
Behavioral task
behavioral1
Sample
2e3eb67d4a6d51da81bb2900c64675ef_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e3eb67d4a6d51da81bb2900c64675ef_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
2e3eb67d4a6d51da81bb2900c64675ef_JaffaCakes118
-
Size
100KB
-
MD5
2e3eb67d4a6d51da81bb2900c64675ef
-
SHA1
c01e5e7b1574fabc276ba775b0f634cc76c9674f
-
SHA256
79fe65670e2d0708a19e34365521de1d76c366219602d7da86502fe848b906db
-
SHA512
471604a3e0742d1f49bac2f4498a08a1f8a51d5776392843d41b242e5d8a98146c530389cf3f65aa10dd884493a2122ba02f17eb7e13c11d99bd459a68b70764
-
SSDEEP
1536:Ghsq/bmXYJK2qCqT7GXpVL9wH0oHdpLC5IxMg0Yl5Lgo4zHYRIA:GbmIJK2NpVK0o9pAIxx0YPLgo47Y
Score8/10-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
-