Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f5d274a7491191e1a0180ec06a70c7bb_JaffaCakes118
-
Size
216KB
-
Sample
240417-p7ryxshg3s
-
MD5
f5d274a7491191e1a0180ec06a70c7bb
-
SHA1
d675406a2e63ba4b7a87e72024e575e0453f6324
-
SHA256
96e73eb087f1c27a05ad2fbd861b9fd4c73bd86dfda4215cf4344bd3d934d181
-
SHA512
f71f59e49d7a6c81aa0571d78432f97c35844872eb3c2c4cd89d4137b266d789d377f27c5c215c7bbc6fb2a416aebfb9e63f414c6acb2f924ce33c1ca3081610
-
SSDEEP
6144:CcX2DECtrkQ5zgMZUP15HcAgonAmKfwDVAQ:n41gMZUHcAgonAmZDV
Static task
static1
Behavioral task
behavioral1
Sample
f5d274a7491191e1a0180ec06a70c7bb_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f5d274a7491191e1a0180ec06a70c7bb_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
f5d274a7491191e1a0180ec06a70c7bb_JaffaCakes118
-
Size
216KB
-
MD5
f5d274a7491191e1a0180ec06a70c7bb
-
SHA1
d675406a2e63ba4b7a87e72024e575e0453f6324
-
SHA256
96e73eb087f1c27a05ad2fbd861b9fd4c73bd86dfda4215cf4344bd3d934d181
-
SHA512
f71f59e49d7a6c81aa0571d78432f97c35844872eb3c2c4cd89d4137b266d789d377f27c5c215c7bbc6fb2a416aebfb9e63f414c6acb2f924ce33c1ca3081610
-
SSDEEP
6144:CcX2DECtrkQ5zgMZUP15HcAgonAmKfwDVAQ:n41gMZUHcAgonAmZDV
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-