Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fa83bf7904cba0c1944963dd0bcd626e_JaffaCakes118
-
Size
20KB
-
Sample
240419-ryn7saeg77
-
MD5
fa83bf7904cba0c1944963dd0bcd626e
-
SHA1
3a25157344d951c9e328b42fcaf8380c7d20c001
-
SHA256
c0886cc4e3aa82033ef87770af50bfda7b63fbf38f31a2d65b19f728768bab4f
-
SHA512
16168bab7c16d8474feee48fb0da3a80d1654fa194da472493f01b7734dd577694478b7d09765d3ab538c210985dd6028ced76f2967eca0d562f61049a020c8e
-
SSDEEP
384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L41mm:hDXWipuE+K3/SSHgxmHZ1B
Static task
static1
Behavioral task
behavioral1
Sample
fa83bf7904cba0c1944963dd0bcd626e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa83bf7904cba0c1944963dd0bcd626e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
fa83bf7904cba0c1944963dd0bcd626e_JaffaCakes118
-
Size
20KB
-
MD5
fa83bf7904cba0c1944963dd0bcd626e
-
SHA1
3a25157344d951c9e328b42fcaf8380c7d20c001
-
SHA256
c0886cc4e3aa82033ef87770af50bfda7b63fbf38f31a2d65b19f728768bab4f
-
SHA512
16168bab7c16d8474feee48fb0da3a80d1654fa194da472493f01b7734dd577694478b7d09765d3ab538c210985dd6028ced76f2967eca0d562f61049a020c8e
-
SSDEEP
384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L41mm:hDXWipuE+K3/SSHgxmHZ1B
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-