Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3413dfa1fae22e3a618fca32f304b63b_JaffaCakes118
-
Size
112KB
-
Sample
240710-ky5q7s1bjg
-
MD5
3413dfa1fae22e3a618fca32f304b63b
-
SHA1
636311d413ad9f72da772176e0fca5aae0ae3716
-
SHA256
65b1dafdca6026b6267279a0ac327a409f1b9bf8e802f1f3ee0906e2ab0cd598
-
SHA512
7a9b166968e50ff2f5c952f317e6edc502d737107a6037bf61181a706d867d4c5c2a96f64fd50acb9c9a3a31ab54a7668855a99e38699cc1dd62bc1235d3d9d4
-
SSDEEP
3072:uSathrPGP3s0t85YYC8NT1FqnV6RoQNVm6tVc/bmmaPA:uzthrP+JsYYCsakhNV9QbP
Static task
static1
Behavioral task
behavioral1
Sample
3413dfa1fae22e3a618fca32f304b63b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3413dfa1fae22e3a618fca32f304b63b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
3413dfa1fae22e3a618fca32f304b63b_JaffaCakes118
-
Size
112KB
-
MD5
3413dfa1fae22e3a618fca32f304b63b
-
SHA1
636311d413ad9f72da772176e0fca5aae0ae3716
-
SHA256
65b1dafdca6026b6267279a0ac327a409f1b9bf8e802f1f3ee0906e2ab0cd598
-
SHA512
7a9b166968e50ff2f5c952f317e6edc502d737107a6037bf61181a706d867d4c5c2a96f64fd50acb9c9a3a31ab54a7668855a99e38699cc1dd62bc1235d3d9d4
-
SSDEEP
3072:uSathrPGP3s0t85YYC8NT1FqnV6RoQNVm6tVc/bmmaPA:uzthrP+JsYYCsakhNV9QbP
Score10/10-
Modifies WinLogon for persistence
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-