Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fbc04b72d274ae7cfd3cd69aadf389cf_JaffaCakes118
-
Size
196KB
-
Sample
240420-c68ttsec84
-
MD5
fbc04b72d274ae7cfd3cd69aadf389cf
-
SHA1
38f3109a6e1cb16e17b803a729a0d8f5e3e85ca3
-
SHA256
e3cbf30449ff668ab7c9cbef820512132d25c44d8924108fae8c6b1cedc28349
-
SHA512
c69a397d554c7f3f59070bf7c4379f75f8ca0d56c3a23d7bcd71b56e46f7ce59c28b76a55f0703c418f2a71c688032b8f8c58af5448af640dbe4167a334216d7
-
SSDEEP
6144:/WvnELXCb1CcReqYJqOaihDI/5Yz43qA0gA3Zgfx9c1dLJYkAeRBVF48tju1f8Lr:/knEuGhI/5Yz43qA0gA3Zgfx9c1dLJYU
Static task
static1
Behavioral task
behavioral1
Sample
fbc04b72d274ae7cfd3cd69aadf389cf_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fbc04b72d274ae7cfd3cd69aadf389cf_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
fbc04b72d274ae7cfd3cd69aadf389cf_JaffaCakes118
-
Size
196KB
-
MD5
fbc04b72d274ae7cfd3cd69aadf389cf
-
SHA1
38f3109a6e1cb16e17b803a729a0d8f5e3e85ca3
-
SHA256
e3cbf30449ff668ab7c9cbef820512132d25c44d8924108fae8c6b1cedc28349
-
SHA512
c69a397d554c7f3f59070bf7c4379f75f8ca0d56c3a23d7bcd71b56e46f7ce59c28b76a55f0703c418f2a71c688032b8f8c58af5448af640dbe4167a334216d7
-
SSDEEP
6144:/WvnELXCb1CcReqYJqOaihDI/5Yz43qA0gA3Zgfx9c1dLJYkAeRBVF48tju1f8Lr:/knEuGhI/5Yz43qA0gA3Zgfx9c1dLJYU
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-