Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0319f4a199d00562e1e2458c01deef1a_JaffaCakes118
-
Size
76KB
-
Sample
240328-md1b4agb24
-
MD5
0319f4a199d00562e1e2458c01deef1a
-
SHA1
07be3534eb0d269d1d0ee2addd711e03d5f8bb39
-
SHA256
d85bd4d06c7b84f22980e36da1b11a18f66b1bf63579ac0dc6769ea422293d8b
-
SHA512
9b65ed8be9481359dd41a15fa32870b88b7a1131b2aaf9919d5e3e634cc0c7177907cde624c9a28d49404f43d435ea742cfbda1804f55768680ca69086f97d52
-
SSDEEP
768:1FGPbKIflMdYYLqsouZFRELqFlhFM/aCKdN27fx0Xn6YOD5ryTUu:1QPb3aL2uZFxlD8K727fxi6Ycu
Static task
static1
Behavioral task
behavioral1
Sample
0319f4a199d00562e1e2458c01deef1a_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0319f4a199d00562e1e2458c01deef1a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
0319f4a199d00562e1e2458c01deef1a_JaffaCakes118
-
Size
76KB
-
MD5
0319f4a199d00562e1e2458c01deef1a
-
SHA1
07be3534eb0d269d1d0ee2addd711e03d5f8bb39
-
SHA256
d85bd4d06c7b84f22980e36da1b11a18f66b1bf63579ac0dc6769ea422293d8b
-
SHA512
9b65ed8be9481359dd41a15fa32870b88b7a1131b2aaf9919d5e3e634cc0c7177907cde624c9a28d49404f43d435ea742cfbda1804f55768680ca69086f97d52
-
SSDEEP
768:1FGPbKIflMdYYLqsouZFRELqFlhFM/aCKdN27fx0Xn6YOD5ryTUu:1QPb3aL2uZFxlD8K727fxi6Ycu
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-