Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
21db749271863397b378d6326c4253f7_JaffaCakes118
-
Size
16KB
-
Sample
240329-pjq2qahc58
-
MD5
21db749271863397b378d6326c4253f7
-
SHA1
c48c074b779a506f5685d9b47f57fa799da62ede
-
SHA256
d92cb5264a1281f5a095cae6c846fdbf22f6d4b91cd7a575aa2139b092cb833e
-
SHA512
338c3dd57478a46bcf43edaee5468b5d66b026faa12922d2467f2c5476c6f2839771330dc38731d9897a8cd00fe24ebfcdd7aced9ed0142b2d7b4b19b7e84779
-
SSDEEP
384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlK:hDXWipuE+K3/SSHgxmlK
Static task
static1
Behavioral task
behavioral1
Sample
21db749271863397b378d6326c4253f7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21db749271863397b378d6326c4253f7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
21db749271863397b378d6326c4253f7_JaffaCakes118
-
Size
16KB
-
MD5
21db749271863397b378d6326c4253f7
-
SHA1
c48c074b779a506f5685d9b47f57fa799da62ede
-
SHA256
d92cb5264a1281f5a095cae6c846fdbf22f6d4b91cd7a575aa2139b092cb833e
-
SHA512
338c3dd57478a46bcf43edaee5468b5d66b026faa12922d2467f2c5476c6f2839771330dc38731d9897a8cd00fe24ebfcdd7aced9ed0142b2d7b4b19b7e84779
-
SSDEEP
384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlK:hDXWipuE+K3/SSHgxmlK
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-