Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ec25e8234d9cf1388a2d97407d845b01_JaffaCakes118
-
Size
1.6MB
-
Sample
240410-2mmvpadc95
-
MD5
ec25e8234d9cf1388a2d97407d845b01
-
SHA1
0cd7ab43fc060557525ae08a8b0a91a8f4f1fdab
-
SHA256
e9afb4c74de6824360cdc805a33948c83fd3624ea4fbfd61bbf66314eb77a294
-
SHA512
2b870d279522389b281f4db334cc3d1e2b683aa527100d06fd961173da7b5b0124f14de778f38e341efea4f59abca8db34eb30884f6376a761000486adca66f1
-
SSDEEP
49152:0vKyrl7qkuiN0FnnHMvq/IXxsheEnotfw23SZ:0v/rl27nnn7AXxA6faZ
Static task
static1
Behavioral task
behavioral1
Sample
ec25e8234d9cf1388a2d97407d845b01_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
ec25e8234d9cf1388a2d97407d845b01_JaffaCakes118
-
Size
1.6MB
-
MD5
ec25e8234d9cf1388a2d97407d845b01
-
SHA1
0cd7ab43fc060557525ae08a8b0a91a8f4f1fdab
-
SHA256
e9afb4c74de6824360cdc805a33948c83fd3624ea4fbfd61bbf66314eb77a294
-
SHA512
2b870d279522389b281f4db334cc3d1e2b683aa527100d06fd961173da7b5b0124f14de778f38e341efea4f59abca8db34eb30884f6376a761000486adca66f1
-
SSDEEP
49152:0vKyrl7qkuiN0FnnHMvq/IXxsheEnotfw23SZ:0v/rl27nnn7AXxA6faZ
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-