Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
01cc10f794a3bf364f583a1b7ab5a9c4_JaffaCakes118
-
Size
58KB
-
Sample
240930-rred1azekl
-
MD5
01cc10f794a3bf364f583a1b7ab5a9c4
-
SHA1
9a30860fb0ef3daa55ef1f49b9f676167819b423
-
SHA256
b57ef321858a378eacc5a46f39aad236415c5c417e8f51cedb381c5b8e584d9b
-
SHA512
639277db397c61b6fc39910ffc9ba68f9a133906d5f91b890552bd56e04ad7681369c41d95e5a6d8adb615e9fbc515e8a9b397e810b707463ce187e3e4ec485f
-
SSDEEP
768:yvFa1w7Q6gkX8jwrQyIGR9fB0sFAxkEXbfzVkCID2akMsO4l5EVIb0ozQac+qfpn:MFaiQ6gO813Mf6kELzVlXaHsFeFMQ2o
Static task
static1
Behavioral task
behavioral1
Sample
01cc10f794a3bf364f583a1b7ab5a9c4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01cc10f794a3bf364f583a1b7ab5a9c4_JaffaCakes118.exe
Resource
win10v2004-20240910-en
Malware Config
Targets
-
-
Target
01cc10f794a3bf364f583a1b7ab5a9c4_JaffaCakes118
-
Size
58KB
-
MD5
01cc10f794a3bf364f583a1b7ab5a9c4
-
SHA1
9a30860fb0ef3daa55ef1f49b9f676167819b423
-
SHA256
b57ef321858a378eacc5a46f39aad236415c5c417e8f51cedb381c5b8e584d9b
-
SHA512
639277db397c61b6fc39910ffc9ba68f9a133906d5f91b890552bd56e04ad7681369c41d95e5a6d8adb615e9fbc515e8a9b397e810b707463ce187e3e4ec485f
-
SSDEEP
768:yvFa1w7Q6gkX8jwrQyIGR9fB0sFAxkEXbfzVkCID2akMsO4l5EVIb0ozQac+qfpn:MFaiQ6gO813Mf6kELzVlXaHsFeFMQ2o
Score10/10-
Modifies WinLogon for persistence
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-