Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0e4c41a998ccab92561ac1858ab836a8_JaffaCakes118
-
Size
14KB
-
Sample
240328-ydek6sfe32
-
MD5
0e4c41a998ccab92561ac1858ab836a8
-
SHA1
07e0d1777a1d689af330680484c6e4134a418f2d
-
SHA256
362bc615d5bb8b6c3387b35c147c18cbb4f25046af99061b9335a5e25bdf4577
-
SHA512
1fc68a3069c46b8e8d6f3d111e020852a6446c34702ece855b145f7d590c82ad75ade6dd82b408f3d25353c41a56e827563ee2b8fca6cbfb19f56c2d53395068
-
SSDEEP
384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhhiP:hDXWipuE+K3/SSHgxLiP
Static task
static1
Behavioral task
behavioral1
Sample
0e4c41a998ccab92561ac1858ab836a8_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0e4c41a998ccab92561ac1858ab836a8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
0e4c41a998ccab92561ac1858ab836a8_JaffaCakes118
-
Size
14KB
-
MD5
0e4c41a998ccab92561ac1858ab836a8
-
SHA1
07e0d1777a1d689af330680484c6e4134a418f2d
-
SHA256
362bc615d5bb8b6c3387b35c147c18cbb4f25046af99061b9335a5e25bdf4577
-
SHA512
1fc68a3069c46b8e8d6f3d111e020852a6446c34702ece855b145f7d590c82ad75ade6dd82b408f3d25353c41a56e827563ee2b8fca6cbfb19f56c2d53395068
-
SSDEEP
384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhhiP:hDXWipuE+K3/SSHgxLiP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-