Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

5

JaffaCakes...ad.exe

windows7-x64

6

JaffaCakes...ad.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8a9a8de27d029622309de2d37653eead

  • Size

    226KB

  • Sample

    250328-myn5kawrz5

  • MD5

    8a9a8de27d029622309de2d37653eead

  • SHA1

    70d788d8c596060687382040db4939ebb1764350

  • SHA256

    599055d0b752c06cf669adf538cf769bcc9351dce1eb65aa78921215f4538f79

  • SHA512

    4df3373ddbaeef7999d698a700be5b9a1aba64da675aa63de16d940f31f9f7759c7524e06437d8266022fe191fb3334a39600ffc07983593dd0c2f1ee4dda021

  • SSDEEP

    6144:ky8Gngxu7bu28Bi6fxVwZkHx/jwFpTpXybkF:kAngkbghOOJjUBpXZ

Score
6/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      JaffaCakes118_8a9a8de27d029622309de2d37653eead

    • Size

      226KB

    • MD5

      8a9a8de27d029622309de2d37653eead

    • SHA1

      70d788d8c596060687382040db4939ebb1764350

    • SHA256

      599055d0b752c06cf669adf538cf769bcc9351dce1eb65aa78921215f4538f79

    • SHA512

      4df3373ddbaeef7999d698a700be5b9a1aba64da675aa63de16d940f31f9f7759c7524e06437d8266022fe191fb3334a39600ffc07983593dd0c2f1ee4dda021

    • SSDEEP

      6144:ky8Gngxu7bu28Bi6fxVwZkHx/jwFpTpXybkF:kAngkbghOOJjUBpXZ

    Score
    6/10
    bootkitdiscoverypersistenceupx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks