Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f00609e6ddd807c310af00e9620fce29_JaffaCakes118
-
Size
14KB
-
Sample
240415-cbc4nsbe37
-
MD5
f00609e6ddd807c310af00e9620fce29
-
SHA1
57aacb299c0bb54ff13af3cf364ef530de4e29f2
-
SHA256
aa69803e52805a85b69ad7681eb2de5138dfe69a4a5b7990ecb8c17059ce1c92
-
SHA512
d9775c5a85e8f9df5a670c3b41a30959cea7f0161395e58b9b52358dc16f739ca488d385415d1c694465c943cf9036dd575966ecbc62759cc8fd4c7850db7d91
-
SSDEEP
384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhhiiC:hDXWipuE+K3/SSHgxLiiC
Static task
static1
Behavioral task
behavioral1
Sample
f00609e6ddd807c310af00e9620fce29_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f00609e6ddd807c310af00e9620fce29_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
f00609e6ddd807c310af00e9620fce29_JaffaCakes118
-
Size
14KB
-
MD5
f00609e6ddd807c310af00e9620fce29
-
SHA1
57aacb299c0bb54ff13af3cf364ef530de4e29f2
-
SHA256
aa69803e52805a85b69ad7681eb2de5138dfe69a4a5b7990ecb8c17059ce1c92
-
SHA512
d9775c5a85e8f9df5a670c3b41a30959cea7f0161395e58b9b52358dc16f739ca488d385415d1c694465c943cf9036dd575966ecbc62759cc8fd4c7850db7d91
-
SSDEEP
384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhhiiC:hDXWipuE+K3/SSHgxLiiC
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-