Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bbcf0544525372a48cb7d39285974c90_JaffaCakes118
-
Size
47KB
-
Sample
240823-p4x1rsxdrp
-
MD5
bbcf0544525372a48cb7d39285974c90
-
SHA1
ab8c843a6a622b5e6a8ca5715f287460b06d20d7
-
SHA256
b8ebdf1a108a3dd19cc95242a0165cb13ede88008d8f75867f91862dde4334b5
-
SHA512
431e6a9e00211c5a5f63e53c137e7674f028a903e1245805f0a4c318fe0f6641df4bb6d0470369f2e2ee55b0ff32257d8bdef3eea71a40952964e0ae640e60df
-
SSDEEP
768:RagDcvogUQd2Z9hAOfdvNX9s3SZDGY8yX3S9Blz4p/p:RPoa9hNvNncyX32/I/p
Static task
static1
Behavioral task
behavioral1
Sample
bbcf0544525372a48cb7d39285974c90_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bbcf0544525372a48cb7d39285974c90_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
bbcf0544525372a48cb7d39285974c90_JaffaCakes118
-
Size
47KB
-
MD5
bbcf0544525372a48cb7d39285974c90
-
SHA1
ab8c843a6a622b5e6a8ca5715f287460b06d20d7
-
SHA256
b8ebdf1a108a3dd19cc95242a0165cb13ede88008d8f75867f91862dde4334b5
-
SHA512
431e6a9e00211c5a5f63e53c137e7674f028a903e1245805f0a4c318fe0f6641df4bb6d0470369f2e2ee55b0ff32257d8bdef3eea71a40952964e0ae640e60df
-
SSDEEP
768:RagDcvogUQd2Z9hAOfdvNX9s3SZDGY8yX3S9Blz4p/p:RPoa9hNvNncyX32/I/p
Score10/10-
Modifies WinLogon for persistence
-
Deletes itself
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-