Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
07e0eeb09f84740f0d9c6cebadb83a60_JaffaCakes118
-
Size
880KB
-
Sample
241001-3lqevswekk
-
MD5
07e0eeb09f84740f0d9c6cebadb83a60
-
SHA1
25edbb31de47b1b72d8efa457561486ebef17817
-
SHA256
45357e4bf1ec6066b6f726d4e2b13059cf5dbb6357a4f5e3812754f4f7174815
-
SHA512
d235e28ef7777bdd25805f4cae801159c72c42cc4285b9bbf96cf4e4b89036a18ae25647b8eb2aebbbac751237e3a8336d34efe3db147992a18feacf0b89e927
-
SSDEEP
12288:PVRNBw6Dskah+3H45x2a/dvReTrK/GbpZoivHLin/xbEQFy8PZIhFnhH:NRXM24zeT2+bpZou6xbEQFyAZI3hH
Static task
static1
Behavioral task
behavioral1
Sample
07e0eeb09f84740f0d9c6cebadb83a60_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07e0eeb09f84740f0d9c6cebadb83a60_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
07e0eeb09f84740f0d9c6cebadb83a60_JaffaCakes118
-
Size
880KB
-
MD5
07e0eeb09f84740f0d9c6cebadb83a60
-
SHA1
25edbb31de47b1b72d8efa457561486ebef17817
-
SHA256
45357e4bf1ec6066b6f726d4e2b13059cf5dbb6357a4f5e3812754f4f7174815
-
SHA512
d235e28ef7777bdd25805f4cae801159c72c42cc4285b9bbf96cf4e4b89036a18ae25647b8eb2aebbbac751237e3a8336d34efe3db147992a18feacf0b89e927
-
SSDEEP
12288:PVRNBw6Dskah+3H45x2a/dvReTrK/GbpZoivHLin/xbEQFy8PZIhFnhH:NRXM24zeT2+bpZou6xbEQFyAZI3hH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-