Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ed3cff1d54cd28a9fc56878d6ebd6be3_JaffaCakes118
-
Size
15KB
-
Sample
240411-msxjrahg78
-
MD5
ed3cff1d54cd28a9fc56878d6ebd6be3
-
SHA1
966589883559d847d2c43bec00a97719297303fa
-
SHA256
7a84f5e90e164cb3d76c823a829c1ca04afdc926f8c1c69b06c3c4386d63b244
-
SHA512
d525f5f90ad03c3c77854190c102673ddc9c6dbed804d22d56b359ef5acc15f0266f6d75212c1f6022797432c0fabf9eab397d13b6868bf921c04fb7cedefd6c
-
SSDEEP
384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYyh66:hDXWipuE+K3/SSHgxmyh66
Static task
static1
Behavioral task
behavioral1
Sample
ed3cff1d54cd28a9fc56878d6ebd6be3_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ed3cff1d54cd28a9fc56878d6ebd6be3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ed3cff1d54cd28a9fc56878d6ebd6be3_JaffaCakes118
-
Size
15KB
-
MD5
ed3cff1d54cd28a9fc56878d6ebd6be3
-
SHA1
966589883559d847d2c43bec00a97719297303fa
-
SHA256
7a84f5e90e164cb3d76c823a829c1ca04afdc926f8c1c69b06c3c4386d63b244
-
SHA512
d525f5f90ad03c3c77854190c102673ddc9c6dbed804d22d56b359ef5acc15f0266f6d75212c1f6022797432c0fabf9eab397d13b6868bf921c04fb7cedefd6c
-
SSDEEP
384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYyh66:hDXWipuE+K3/SSHgxmyh66
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-