Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e00c15792c750f2af5ad496797682069_JaffaCakes118
-
Size
794KB
-
Sample
240914-m25lqazfpn
-
MD5
e00c15792c750f2af5ad496797682069
-
SHA1
e8ac872442d28c0e92a356f9c9171a99e95d7db3
-
SHA256
63ea6c2e41198871d52f81f672a71cf534cfe31c8e778149a07995387b235873
-
SHA512
bddb0cafb6172e229a94bdb11ff36c3341accd7cec5ab8866c5065c7079f97521a3a3f42eaa9d03a40bfa3270c2fc8d7d9292240957f42087b9030f037f370f3
-
SSDEEP
12288:rJ2f18iuVfL7Pbe0QrQr45ma2JQNf6O6qFTVUnHTGOBwFilT:48nVfLLbgau5NyO6YTUzGOBwFilT
Static task
static1
Behavioral task
behavioral1
Sample
e00c15792c750f2af5ad496797682069_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e00c15792c750f2af5ad496797682069_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e00c15792c750f2af5ad496797682069_JaffaCakes118
-
Size
794KB
-
MD5
e00c15792c750f2af5ad496797682069
-
SHA1
e8ac872442d28c0e92a356f9c9171a99e95d7db3
-
SHA256
63ea6c2e41198871d52f81f672a71cf534cfe31c8e778149a07995387b235873
-
SHA512
bddb0cafb6172e229a94bdb11ff36c3341accd7cec5ab8866c5065c7079f97521a3a3f42eaa9d03a40bfa3270c2fc8d7d9292240957f42087b9030f037f370f3
-
SSDEEP
12288:rJ2f18iuVfL7Pbe0QrQr45ma2JQNf6O6qFTVUnHTGOBwFilT:48nVfLLbgau5NyO6YTUzGOBwFilT
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-