Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
263995004fd32e48da1b15c88c7f6adf_JaffaCakes118
-
Size
844KB
-
Sample
241008-14wngsscmm
-
MD5
263995004fd32e48da1b15c88c7f6adf
-
SHA1
747275d015e73a1503dbbf5f244076edd6e3fdf3
-
SHA256
de4c66fd76cd6824b07818daacf5e9e86426ed608a41b0f7c459d29fa35cc5f3
-
SHA512
f90fe5fad86835de2c1d71c0ac4d495f74c36c4732346d3807afa2407359db269e818871dcdeb3b65656fe550a77f60e004ff888fe3e9419182493d469bae173
-
SSDEEP
24576:c2AksuXeUtXPoVucptBP8FAl65/54Xmv+BK++l:lB3tXqhptZ8OI5/om++l
Static task
static1
Behavioral task
behavioral1
Sample
263995004fd32e48da1b15c88c7f6adf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
263995004fd32e48da1b15c88c7f6adf_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
263995004fd32e48da1b15c88c7f6adf_JaffaCakes118
-
Size
844KB
-
MD5
263995004fd32e48da1b15c88c7f6adf
-
SHA1
747275d015e73a1503dbbf5f244076edd6e3fdf3
-
SHA256
de4c66fd76cd6824b07818daacf5e9e86426ed608a41b0f7c459d29fa35cc5f3
-
SHA512
f90fe5fad86835de2c1d71c0ac4d495f74c36c4732346d3807afa2407359db269e818871dcdeb3b65656fe550a77f60e004ff888fe3e9419182493d469bae173
-
SSDEEP
24576:c2AksuXeUtXPoVucptBP8FAl65/54Xmv+BK++l:lB3tXqhptZ8OI5/om++l
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-