Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a560af0210323a31168d429d3119c537_JaffaCakes118
-
Size
212KB
-
Sample
240818-e2g7esvgma
-
MD5
a560af0210323a31168d429d3119c537
-
SHA1
6eb2fdb03753ee11062c172d67bc00c3e9df24e7
-
SHA256
b65547d07b72348c6ac229b68c8d1589d8f1bb1f5e7b9ece582f63432af03554
-
SHA512
7df6dc8a405ac4b645229200a574b5116635b925dc4c5360d9dc15f2c72cf602775ce7c406bc175498ca8e041a01993a58eae4da05ade37accb41f7801c95197
-
SSDEEP
6144:syeD+mpa0pGaj2JgT5NuItvS7RGaJ/rgj7WpyN5PElXd:Xeimpa0pzjD9Icvy/67WpyNot
Static task
static1
Behavioral task
behavioral1
Sample
a560af0210323a31168d429d3119c537_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a560af0210323a31168d429d3119c537_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
a560af0210323a31168d429d3119c537_JaffaCakes118
-
Size
212KB
-
MD5
a560af0210323a31168d429d3119c537
-
SHA1
6eb2fdb03753ee11062c172d67bc00c3e9df24e7
-
SHA256
b65547d07b72348c6ac229b68c8d1589d8f1bb1f5e7b9ece582f63432af03554
-
SHA512
7df6dc8a405ac4b645229200a574b5116635b925dc4c5360d9dc15f2c72cf602775ce7c406bc175498ca8e041a01993a58eae4da05ade37accb41f7801c95197
-
SSDEEP
6144:syeD+mpa0pGaj2JgT5NuItvS7RGaJ/rgj7WpyN5PElXd:Xeimpa0pzjD9Icvy/67WpyNot
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-