Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f0cf03d3a72a79a5fc74e68f3bfa9c9c_JaffaCakes118
-
Size
100KB
-
Sample
240921-284ekazcjp
-
MD5
f0cf03d3a72a79a5fc74e68f3bfa9c9c
-
SHA1
3f92228a7a8609fbda1bbcbfd369372661541a6e
-
SHA256
1336151bcc3f2d1c7ae3f782388d5ab5f7a489b989e4c64ef16215638cd3891d
-
SHA512
863392c182739d78ea2e2b967d86ca2c5a9b4d9a2f7e01ebcdaf677ae5ce9ede6d9b49aa06d062e056769243688d4812c802109ae88356d53ba03acf22724c00
-
SSDEEP
3072:ePB+MnvZUKzk/HOsS6+Piq9B43kykTsRgo7kY:6rnBFzk/HOsSNE78FY
Static task
static1
Behavioral task
behavioral1
Sample
f0cf03d3a72a79a5fc74e68f3bfa9c9c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0cf03d3a72a79a5fc74e68f3bfa9c9c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f0cf03d3a72a79a5fc74e68f3bfa9c9c_JaffaCakes118
-
Size
100KB
-
MD5
f0cf03d3a72a79a5fc74e68f3bfa9c9c
-
SHA1
3f92228a7a8609fbda1bbcbfd369372661541a6e
-
SHA256
1336151bcc3f2d1c7ae3f782388d5ab5f7a489b989e4c64ef16215638cd3891d
-
SHA512
863392c182739d78ea2e2b967d86ca2c5a9b4d9a2f7e01ebcdaf677ae5ce9ede6d9b49aa06d062e056769243688d4812c802109ae88356d53ba03acf22724c00
-
SSDEEP
3072:ePB+MnvZUKzk/HOsS6+Piq9B43kykTsRgo7kY:6rnBFzk/HOsSNE78FY
Score8/10-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
-