Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3a955f87e132ba6ce13d84d646a0641f_JaffaCakes118
-
Size
272KB
-
Sample
240711-y4rcnasdmm
-
MD5
3a955f87e132ba6ce13d84d646a0641f
-
SHA1
ab19c82ad410d256b8c1f86544d12d02f16658f2
-
SHA256
c7f189619f3769144632b1b140bbff8e99512232b9824bd27c93822a66de1228
-
SHA512
090fce3a2c068e6b34828c38c4a716a7411783785dc4f030bdfa43b02b61f404deb08992a811d3d357c28dac33e753e4abcf9c1adad28e809c09fbe55e59d4bc
-
SSDEEP
6144:ycWgpsyZezlamVOlB3YERWD9pTUuyHrs8+TTTTTTTTTTT7ZYW/:EZLzlupn0ZpDgrsdYW/
Static task
static1
Behavioral task
behavioral1
Sample
3a955f87e132ba6ce13d84d646a0641f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a955f87e132ba6ce13d84d646a0641f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
3a955f87e132ba6ce13d84d646a0641f_JaffaCakes118
-
Size
272KB
-
MD5
3a955f87e132ba6ce13d84d646a0641f
-
SHA1
ab19c82ad410d256b8c1f86544d12d02f16658f2
-
SHA256
c7f189619f3769144632b1b140bbff8e99512232b9824bd27c93822a66de1228
-
SHA512
090fce3a2c068e6b34828c38c4a716a7411783785dc4f030bdfa43b02b61f404deb08992a811d3d357c28dac33e753e4abcf9c1adad28e809c09fbe55e59d4bc
-
SSDEEP
6144:ycWgpsyZezlamVOlB3YERWD9pTUuyHrs8+TTTTTTTTTTT7ZYW/:EZLzlupn0ZpDgrsdYW/
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetThreadContext
-