Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

5

JaffaCakes...9a.exe

windows7-x64

6

JaffaCakes...9a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_c35557c7a953bd65e60df10344a0f79a

  • Size

    338KB

  • Sample

    250208-p8zedswmgx

  • MD5

    c35557c7a953bd65e60df10344a0f79a

  • SHA1

    d6c3560d9f54c768a5d5f689bf38fcfdd823189d

  • SHA256

    3eabb6230b85255e4fe65dfa72cfce09051eadfa65a19a51d6498f49dd3151e2

  • SHA512

    968610200730e5e4b867601e82422d3390f91de238f6e477b78038a364bae1745a8e5124cb5839a4041e63f3166181a465d1538f89c7cf7bef0bf27a645a2e04

  • SSDEEP

    6144:UA5wVdCy6wrbDY0rDqTWC4zEDzKuTrSbxc97cvo6giJjPRvIKA58WocCR2gKh7X:Ujyy64VrDqTWIzW+9Yvo6g4jPtIx5LoU

Score
8/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      JaffaCakes118_c35557c7a953bd65e60df10344a0f79a

    • Size

      338KB

    • MD5

      c35557c7a953bd65e60df10344a0f79a

    • SHA1

      d6c3560d9f54c768a5d5f689bf38fcfdd823189d

    • SHA256

      3eabb6230b85255e4fe65dfa72cfce09051eadfa65a19a51d6498f49dd3151e2

    • SHA512

      968610200730e5e4b867601e82422d3390f91de238f6e477b78038a364bae1745a8e5124cb5839a4041e63f3166181a465d1538f89c7cf7bef0bf27a645a2e04

    • SSDEEP

      6144:UA5wVdCy6wrbDY0rDqTWC4zEDzKuTrSbxc97cvo6giJjPRvIKA58WocCR2gKh7X:Ujyy64VrDqTWIzW+9Yvo6g4jPtIx5LoU

    Score
    8/10
    bootkitdiscoverypersistenceupx

    • Downloads MZ/PE file

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks