Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ebde4a55d30a79c6f7196a0fe861097d_JaffaCakes118
-
Size
2.8MB
-
Sample
240410-ymxs4sdb6t
-
MD5
ebde4a55d30a79c6f7196a0fe861097d
-
SHA1
fd2a3374469effd7b25a64cdabaa68c443cf977a
-
SHA256
808cb41470339ab4896114fbc7c40400632449fe003a77a8719b90e34caf1327
-
SHA512
d0dd66e51b09cf0090dc155997e85e867f863ab2aa3894cb141ff3ff54ac44990253b0dd419744fdf6ee3f2618bca1cb72259c298c33027547746f84e9c1a994
-
SSDEEP
49152:67N1ahCK0V7N1ahCe0V7N1ahCm0V7N1ahC40:67X7L7z7
Behavioral task
behavioral1
Sample
ebde4a55d30a79c6f7196a0fe861097d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ebde4a55d30a79c6f7196a0fe861097d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ebde4a55d30a79c6f7196a0fe861097d_JaffaCakes118
-
Size
2.8MB
-
MD5
ebde4a55d30a79c6f7196a0fe861097d
-
SHA1
fd2a3374469effd7b25a64cdabaa68c443cf977a
-
SHA256
808cb41470339ab4896114fbc7c40400632449fe003a77a8719b90e34caf1327
-
SHA512
d0dd66e51b09cf0090dc155997e85e867f863ab2aa3894cb141ff3ff54ac44990253b0dd419744fdf6ee3f2618bca1cb72259c298c33027547746f84e9c1a994
-
SSDEEP
49152:67N1ahCK0V7N1ahCe0V7N1ahCm0V7N1ahC40:67X7L7z7
Score10/10-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-