Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2074ab715fdd1eeb21ebe7af4d7a08a0_JaffaCakes118
-
Size
8.9MB
-
Sample
240329-m8635afd71
-
MD5
2074ab715fdd1eeb21ebe7af4d7a08a0
-
SHA1
868968c4653578a9b1e22a77981f2df8421975cc
-
SHA256
575175e7a4e9f822848f4d0a4486bb01cbd182716aee6dc34d450dcc1a07af09
-
SHA512
fe9f1b4aedc79cb6697b937ca23a0a55b33a5703dc200dd1eba5e7afe6f917a5fc6fec228a4fc7cdd92b398af7f8649c0c0a66c281e09d1b47b00dbab04b85a2
-
SSDEEP
196608:8Bazg7DSmBazg7DSm8Bazg7DSmBazg7DSmn:Rg7uDg7uIg7uDg7uA
Static task
static1
Behavioral task
behavioral1
Sample
2074ab715fdd1eeb21ebe7af4d7a08a0_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2074ab715fdd1eeb21ebe7af4d7a08a0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2074ab715fdd1eeb21ebe7af4d7a08a0_JaffaCakes118
-
Size
8.9MB
-
MD5
2074ab715fdd1eeb21ebe7af4d7a08a0
-
SHA1
868968c4653578a9b1e22a77981f2df8421975cc
-
SHA256
575175e7a4e9f822848f4d0a4486bb01cbd182716aee6dc34d450dcc1a07af09
-
SHA512
fe9f1b4aedc79cb6697b937ca23a0a55b33a5703dc200dd1eba5e7afe6f917a5fc6fec228a4fc7cdd92b398af7f8649c0c0a66c281e09d1b47b00dbab04b85a2
-
SSDEEP
196608:8Bazg7DSmBazg7DSm8Bazg7DSmBazg7DSmn:Rg7uDg7uIg7uDg7uA
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-