Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
dea8f56582d91ae4605f7162a006aeae_JaffaCakes118
-
Size
144KB
-
Sample
240913-w31hts1fjn
-
MD5
dea8f56582d91ae4605f7162a006aeae
-
SHA1
96a38ffacfb0ac8a369ce03cffb6c1f2b4893fa6
-
SHA256
5f60950528295a7885e1241258ea283d44ea9f3960e8b62300e2231f340afd04
-
SHA512
2ba4e9e84e75828cfa5bbc5d1c0d16b2f308fb5ff4557dc8cee5550701a3f77be6ff6580249872205374c7d8156cb37fba8b7b4df892992508666009bf603b6a
-
SSDEEP
1536:/fQDBTn64E8RtIacmqWQuGMZ0jkLcDBTn64E8RtIacGDBTn64E8RtIacRjDKyEXd:3QDQ/0cd2jLwrecqOMpV+WR36rHuG
Static task
static1
Behavioral task
behavioral1
Sample
dea8f56582d91ae4605f7162a006aeae_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dea8f56582d91ae4605f7162a006aeae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
dea8f56582d91ae4605f7162a006aeae_JaffaCakes118
-
Size
144KB
-
MD5
dea8f56582d91ae4605f7162a006aeae
-
SHA1
96a38ffacfb0ac8a369ce03cffb6c1f2b4893fa6
-
SHA256
5f60950528295a7885e1241258ea283d44ea9f3960e8b62300e2231f340afd04
-
SHA512
2ba4e9e84e75828cfa5bbc5d1c0d16b2f308fb5ff4557dc8cee5550701a3f77be6ff6580249872205374c7d8156cb37fba8b7b4df892992508666009bf603b6a
-
SSDEEP
1536:/fQDBTn64E8RtIacmqWQuGMZ0jkLcDBTn64E8RtIacGDBTn64E8RtIacRjDKyEXd:3QDQ/0cd2jLwrecqOMpV+WR36rHuG
Score10/10-
Modifies WinLogon for persistence
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-