Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e1cd9b6139c606264db62a2570d7d163_JaffaCakes118
-
Size
79KB
-
Sample
240915-ga3edsycjn
-
MD5
e1cd9b6139c606264db62a2570d7d163
-
SHA1
3acb5dbb2e03d0b302b58b09a0d3cde77d5bf8ff
-
SHA256
ef7d43ada28a3ce27c5a88bfc93282f83179f4d8fe3732824696eec9a9de1c39
-
SHA512
098c9f0a24c1aa93533f9b040aebf8aaf7fe9e1828afe50eb9dccf2afb3b3866c633a8471fcd5543d40ed7777fa47653e46e3199a260760659594d6c11e6af11
-
SSDEEP
1536:GQuTga8X62MTaUMMnMMMMMQqvuOYQIYQD7eRxA3PtYqcb+sCcNyOa+Mys9H1TDr:FukHFUMMnMMMMMX7I7D7eRa3FYqcbf5U
Static task
static1
Behavioral task
behavioral1
Sample
e1cd9b6139c606264db62a2570d7d163_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1cd9b6139c606264db62a2570d7d163_JaffaCakes118.exe
Resource
win10v2004-20240910-en
Malware Config
Targets
-
-
Target
e1cd9b6139c606264db62a2570d7d163_JaffaCakes118
-
Size
79KB
-
MD5
e1cd9b6139c606264db62a2570d7d163
-
SHA1
3acb5dbb2e03d0b302b58b09a0d3cde77d5bf8ff
-
SHA256
ef7d43ada28a3ce27c5a88bfc93282f83179f4d8fe3732824696eec9a9de1c39
-
SHA512
098c9f0a24c1aa93533f9b040aebf8aaf7fe9e1828afe50eb9dccf2afb3b3866c633a8471fcd5543d40ed7777fa47653e46e3199a260760659594d6c11e6af11
-
SSDEEP
1536:GQuTga8X62MTaUMMnMMMMMQqvuOYQIYQD7eRxA3PtYqcb+sCcNyOa+Mys9H1TDr:FukHFUMMnMMMMMX7I7D7eRa3FYqcbf5U
-
Disables Task Manager via registry modification
-
Event Triggered Execution: AppCert DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppCert DLLs loaded into processes.
-
Executes dropped EXE
-
Loads dropped DLL
-