Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d203e61d81ee190e81154fa2939a5875_JaffaCakes118
-
Size
727KB
-
Sample
240907-qgxl6awclm
-
MD5
d203e61d81ee190e81154fa2939a5875
-
SHA1
72ea05c9258c75c4d83a02feac4daabfdd106455
-
SHA256
5facfedec540c1335a3e845062b8a06639dd31ea59a9238cf9f3bfdb0f732120
-
SHA512
4b47ca612dd5e7282bb29622832500809afd63df5d8ec0f4fdaaced46ad59470dc94c68ee1c5c6b932e4a4fd080b793f3218b28214fbd6fe9e2b6a7c9a6a94bf
-
SSDEEP
12288:DwECaUglPnFsk7P0UahDyDT1xBRXjIjput6kAVuCHO2m:DwEC70qkgUahDuPRvKxO2m
Static task
static1
Behavioral task
behavioral1
Sample
d203e61d81ee190e81154fa2939a5875_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d203e61d81ee190e81154fa2939a5875_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d203e61d81ee190e81154fa2939a5875_JaffaCakes118
-
Size
727KB
-
MD5
d203e61d81ee190e81154fa2939a5875
-
SHA1
72ea05c9258c75c4d83a02feac4daabfdd106455
-
SHA256
5facfedec540c1335a3e845062b8a06639dd31ea59a9238cf9f3bfdb0f732120
-
SHA512
4b47ca612dd5e7282bb29622832500809afd63df5d8ec0f4fdaaced46ad59470dc94c68ee1c5c6b932e4a4fd080b793f3218b28214fbd6fe9e2b6a7c9a6a94bf
-
SSDEEP
12288:DwECaUglPnFsk7P0UahDyDT1xBRXjIjput6kAVuCHO2m:DwEC70qkgUahDuPRvKxO2m
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-