Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
94b121e1a9f2b13be6097ef00f23d68d_JaffaCakes118
-
Size
479KB
-
Sample
240813-zphyeazfql
-
MD5
94b121e1a9f2b13be6097ef00f23d68d
-
SHA1
03935be2b57e27e652ab211dd2ce7d38cadb8fd2
-
SHA256
1d5d8c51b77a3d48869c0d1a8cc407113917f60ecc6f710cb187d5b08a658b87
-
SHA512
0d396a7e44760c7f53b417174652f2a7524ff0bde1466a4f1bbe1e02350f9567a3652c0f45d4c57b01a46d0353b691a0eddd729c4e7e18045fc6aee5973baa20
-
SSDEEP
6144:cbi2G5iJFMsYFkY8ryjIHUaKCoFMow3Sx6G2Q4oJu2XBKn+I3dyXAV:X22iJi1ryqZMoue6PvIZBK+I3dyXM
Behavioral task
behavioral1
Sample
94b121e1a9f2b13be6097ef00f23d68d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
94b121e1a9f2b13be6097ef00f23d68d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
94b121e1a9f2b13be6097ef00f23d68d_JaffaCakes118
-
Size
479KB
-
MD5
94b121e1a9f2b13be6097ef00f23d68d
-
SHA1
03935be2b57e27e652ab211dd2ce7d38cadb8fd2
-
SHA256
1d5d8c51b77a3d48869c0d1a8cc407113917f60ecc6f710cb187d5b08a658b87
-
SHA512
0d396a7e44760c7f53b417174652f2a7524ff0bde1466a4f1bbe1e02350f9567a3652c0f45d4c57b01a46d0353b691a0eddd729c4e7e18045fc6aee5973baa20
-
SSDEEP
6144:cbi2G5iJFMsYFkY8ryjIHUaKCoFMow3Sx6G2Q4oJu2XBKn+I3dyXAV:X22iJi1ryqZMoue6PvIZBK+I3dyXM
Score7/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-