Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
34ed0033897b1f7c3403ce269806fece_JaffaCakes118
-
Size
100KB
-
Sample
240710-qss34ssgrh
-
MD5
34ed0033897b1f7c3403ce269806fece
-
SHA1
aa0b1b2b055ce4884cebf4dfbcee97211e97c317
-
SHA256
c28612f7139111a2713d6855e0102b8374f2a18f4fd443182311032fbbfaa2f2
-
SHA512
530b2e07e0953ee071db193c14ae7054195d62785b20e97292f5b69d3123ca2477aad8c560dc5d6302a24853a74ba9d70d13023b5203ac896b1bf7a26c17d672
-
SSDEEP
1536:khgoQCEzVllR40ZprOVoay1cQxhjh3yBojDhH1MyDXLHoXSSSeSSS+y:kgEScOayx9iSt17rLHof
Static task
static1
Behavioral task
behavioral1
Sample
34ed0033897b1f7c3403ce269806fece_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34ed0033897b1f7c3403ce269806fece_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
34ed0033897b1f7c3403ce269806fece_JaffaCakes118
-
Size
100KB
-
MD5
34ed0033897b1f7c3403ce269806fece
-
SHA1
aa0b1b2b055ce4884cebf4dfbcee97211e97c317
-
SHA256
c28612f7139111a2713d6855e0102b8374f2a18f4fd443182311032fbbfaa2f2
-
SHA512
530b2e07e0953ee071db193c14ae7054195d62785b20e97292f5b69d3123ca2477aad8c560dc5d6302a24853a74ba9d70d13023b5203ac896b1bf7a26c17d672
-
SSDEEP
1536:khgoQCEzVllR40ZprOVoay1cQxhjh3yBojDhH1MyDXLHoXSSSeSSS+y:kgEScOayx9iSt17rLHof
Score8/10-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
-