Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1ae254ae9746c05fd18315acdf622d17_JaffaCakes118
-
Size
17KB
-
Sample
240329-g5k4labe5x
-
MD5
1ae254ae9746c05fd18315acdf622d17
-
SHA1
d5cbfe3b44847bbba610065397d14db3608d36dd
-
SHA256
a75d096cdff5c1836caadd55a57dbcec086babede90813a0f310f10a9d623096
-
SHA512
89c5c1d19cc1a5f7ad71d7c335044fd8c8dbc86f3e0a0c1028be897a47b7412f80c75a4389e3d09cc0ce02985643861f13b9996966f8535acb0593aac090bbf1
-
SSDEEP
384:6FUpZ10OcmZO2Zp+Nye8pqrmub8TyztsDN:66R0OoKK8o8TyJc
Static task
static1
Behavioral task
behavioral1
Sample
1ae254ae9746c05fd18315acdf622d17_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1ae254ae9746c05fd18315acdf622d17_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
1ae254ae9746c05fd18315acdf622d17_JaffaCakes118
-
Size
17KB
-
MD5
1ae254ae9746c05fd18315acdf622d17
-
SHA1
d5cbfe3b44847bbba610065397d14db3608d36dd
-
SHA256
a75d096cdff5c1836caadd55a57dbcec086babede90813a0f310f10a9d623096
-
SHA512
89c5c1d19cc1a5f7ad71d7c335044fd8c8dbc86f3e0a0c1028be897a47b7412f80c75a4389e3d09cc0ce02985643861f13b9996966f8535acb0593aac090bbf1
-
SSDEEP
384:6FUpZ10OcmZO2Zp+Nye8pqrmub8TyztsDN:66R0OoKK8o8TyJc
Score8/10-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-