Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fef04aa20b216f1aa67ecfa07eee5103_JaffaCakes118
-
Size
110KB
-
Sample
240929-t671za1hmr
-
MD5
fef04aa20b216f1aa67ecfa07eee5103
-
SHA1
7a0d2f381fda021f70408c646bb839e03889e5d0
-
SHA256
bbc0b759438c0253096a5ef04db85dd822ecb49a2d61c139ecd585a3509eb031
-
SHA512
e36125a5fbfcc8e4f04c20f7186e0f67063d14795e0880f0adb3dc20c9b7dbba7cf15b3a8b9cd136e6f73177a04a0fd645e9d3c780889dbb88579a5ad43fb27b
-
SSDEEP
3072:SWwDHP5VTvmKT7CGMNeBdfrPe4j0UlV9UjBt:SZbPDvR7BtL1j0UroB
Static task
static1
Behavioral task
behavioral1
Sample
fef04aa20b216f1aa67ecfa07eee5103_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fef04aa20b216f1aa67ecfa07eee5103_JaffaCakes118.exe
Resource
win10v2004-20240910-en
Malware Config
Targets
-
-
Target
fef04aa20b216f1aa67ecfa07eee5103_JaffaCakes118
-
Size
110KB
-
MD5
fef04aa20b216f1aa67ecfa07eee5103
-
SHA1
7a0d2f381fda021f70408c646bb839e03889e5d0
-
SHA256
bbc0b759438c0253096a5ef04db85dd822ecb49a2d61c139ecd585a3509eb031
-
SHA512
e36125a5fbfcc8e4f04c20f7186e0f67063d14795e0880f0adb3dc20c9b7dbba7cf15b3a8b9cd136e6f73177a04a0fd645e9d3c780889dbb88579a5ad43fb27b
-
SSDEEP
3072:SWwDHP5VTvmKT7CGMNeBdfrPe4j0UlV9UjBt:SZbPDvR7BtL1j0UroB
Score7/10-
Boot or Logon Autostart Execution: Print Processors
Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
-
Drops file in System32 directory
-