Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b9021faedb8fe8c6a8ab004e58d5efcf_JaffaCakes118
-
Size
314KB
-
Sample
240822-y27lvswbqf
-
MD5
b9021faedb8fe8c6a8ab004e58d5efcf
-
SHA1
d88941b16ab1320fdb73846d59bf5e6dedc2967f
-
SHA256
af3919439599fa81e46fc18629d5fdbf6c88ee0078b0c56725a35107bda38cb9
-
SHA512
469b22dcbc8a9a23f035f745bfc736780db5b7c698aac4acac33d9f5c6f99e4c8e3d8298ce911272146a42332d144379e86a6405a4c0c3b0d01dc1e9b0979db8
-
SSDEEP
6144:3iY1oHcrg8FxebsUlFhbHaNcRdhUVwZx+AvP1EUfXykYCs1uKgTPu35+obqq3:3tW8rDEw6hHRdhUVgHFVHsgZW35+6qq3
Static task
static1
Behavioral task
behavioral1
Sample
b9021faedb8fe8c6a8ab004e58d5efcf_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b9021faedb8fe8c6a8ab004e58d5efcf_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b9021faedb8fe8c6a8ab004e58d5efcf_JaffaCakes118
-
Size
314KB
-
MD5
b9021faedb8fe8c6a8ab004e58d5efcf
-
SHA1
d88941b16ab1320fdb73846d59bf5e6dedc2967f
-
SHA256
af3919439599fa81e46fc18629d5fdbf6c88ee0078b0c56725a35107bda38cb9
-
SHA512
469b22dcbc8a9a23f035f745bfc736780db5b7c698aac4acac33d9f5c6f99e4c8e3d8298ce911272146a42332d144379e86a6405a4c0c3b0d01dc1e9b0979db8
-
SSDEEP
6144:3iY1oHcrg8FxebsUlFhbHaNcRdhUVwZx+AvP1EUfXykYCs1uKgTPu35+obqq3:3tW8rDEw6hHRdhUVgHFVHsgZW35+6qq3
Score5/10-
Boot or Logon Autostart Execution: Authentication Package
Suspicious Windows Authentication Registry Modification.
-