Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a13649815e9792abf139875f03fe1e7b_JaffaCakes118
-
Size
44KB
-
Sample
240817-e585baxdnd
-
MD5
a13649815e9792abf139875f03fe1e7b
-
SHA1
c3b40e87893ae6dac045c10ac401528d28b767f7
-
SHA256
2b4df35eda74a9f451226cd2b323808803adcc3788587f9de7307058e5fa3cb7
-
SHA512
e924f60965db437c522079f2b7ab430d447310a134a0b335c9307103516d21b7b42691f4e6ba6ecf9105e552d963d85dbb65ae75706304b2aafb7bb2dbff3e9e
-
SSDEEP
768:nhdPT33ZkuSdzL+XwFlVY/qCYJxhJGroZNeGMwTpnoSQoBGbF5HhD8zT/xQxCIEm:nDPquSdzQwFYSCYJxkoZNOwloSXBGbFJ
Static task
static1
Behavioral task
behavioral1
Sample
a13649815e9792abf139875f03fe1e7b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a13649815e9792abf139875f03fe1e7b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
a13649815e9792abf139875f03fe1e7b_JaffaCakes118
-
Size
44KB
-
MD5
a13649815e9792abf139875f03fe1e7b
-
SHA1
c3b40e87893ae6dac045c10ac401528d28b767f7
-
SHA256
2b4df35eda74a9f451226cd2b323808803adcc3788587f9de7307058e5fa3cb7
-
SHA512
e924f60965db437c522079f2b7ab430d447310a134a0b335c9307103516d21b7b42691f4e6ba6ecf9105e552d963d85dbb65ae75706304b2aafb7bb2dbff3e9e
-
SSDEEP
768:nhdPT33ZkuSdzL+XwFlVY/qCYJxhJGroZNeGMwTpnoSQoBGbF5HhD8zT/xQxCIEm:nDPquSdzQwFYSCYJxkoZNOwloSXBGbFJ
Score10/10-
Modifies WinLogon for persistence
-
Deletes itself
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-