Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fe14a797ee2da3e0e76a2b3cde735b18_JaffaCakes118
-
Size
200KB
-
Sample
240421-bkg9bafa53
-
MD5
fe14a797ee2da3e0e76a2b3cde735b18
-
SHA1
e9b385b2c864fe50a75f364f753f844ddd70e361
-
SHA256
78646802e181208923071b27d398a4df4ad371050bc777db67c905fcc900569f
-
SHA512
13721918e86c5b7cd9d97f36e59ddde3c42baad85c882e244e04c566460218d8e266f92ea8525733654b044fbddc67e18d2ed4f7e229ae67ba3b3f09b844aa27
-
SSDEEP
3072:HbZMzFaDEKrEgQKfQ2OOOFOWhwO2OOOOOrOOOOhOOOOO3OOOF/7OOOOOMOsOOOi1:
Static task
static1
Behavioral task
behavioral1
Sample
fe14a797ee2da3e0e76a2b3cde735b18_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe14a797ee2da3e0e76a2b3cde735b18_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
fe14a797ee2da3e0e76a2b3cde735b18_JaffaCakes118
-
Size
200KB
-
MD5
fe14a797ee2da3e0e76a2b3cde735b18
-
SHA1
e9b385b2c864fe50a75f364f753f844ddd70e361
-
SHA256
78646802e181208923071b27d398a4df4ad371050bc777db67c905fcc900569f
-
SHA512
13721918e86c5b7cd9d97f36e59ddde3c42baad85c882e244e04c566460218d8e266f92ea8525733654b044fbddc67e18d2ed4f7e229ae67ba3b3f09b844aa27
-
SSDEEP
3072:HbZMzFaDEKrEgQKfQ2OOOFOWhwO2OOOOOrOOOOhOOOOO3OOOF/7OOOOOMOsOOOi1:
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-