Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

5

JaffaCakes...28.exe

windows7-x64

6

JaffaCakes...28.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_c2642f73ff0d12aa1b151c9df7cbf028

  • Size

    241KB

  • Sample

    250208-m78wbssngj

  • MD5

    c2642f73ff0d12aa1b151c9df7cbf028

  • SHA1

    950cdc0853683732fbe02c2997d9d8af2af9003b

  • SHA256

    7f6e16efa5bcce2495d8db56c99c5a80156026e57fdd92ef553d56119032dbae

  • SHA512

    b2d2fb279c14507acdd287e58544bd07f7ebca9d88f6412ad1d6e760663d9bcbac560d203a275c1a9b4c9033dd44def0264734c846b26bee88a3013fe09c762f

  • SSDEEP

    6144:KaLGohbTxpsk9vfX64tY8+jRR342MDr7JkioV:7bTxaQfX6sY/4XD363V

Score
8/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      JaffaCakes118_c2642f73ff0d12aa1b151c9df7cbf028

    • Size

      241KB

    • MD5

      c2642f73ff0d12aa1b151c9df7cbf028

    • SHA1

      950cdc0853683732fbe02c2997d9d8af2af9003b

    • SHA256

      7f6e16efa5bcce2495d8db56c99c5a80156026e57fdd92ef553d56119032dbae

    • SHA512

      b2d2fb279c14507acdd287e58544bd07f7ebca9d88f6412ad1d6e760663d9bcbac560d203a275c1a9b4c9033dd44def0264734c846b26bee88a3013fe09c762f

    • SSDEEP

      6144:KaLGohbTxpsk9vfX64tY8+jRR342MDr7JkioV:7bTxaQfX6sY/4XD363V

    Score
    8/10
    bootkitdiscoverypersistenceupx

    • Downloads MZ/PE file

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks