Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ff865b56369afeee3a738ce2406e0fc9_JaffaCakes118
-
Size
227KB
-
Sample
240421-r6tggade94
-
MD5
ff865b56369afeee3a738ce2406e0fc9
-
SHA1
a8b9fd1d5b863c454325cc1f51e30a14ea2a28df
-
SHA256
97e78b98e54d5c2480c459ac2322aa5bdd0e684dac0c436eca4f66265a6eee92
-
SHA512
d373d5f6b36556dba1b35d0fe9202691d4a060966b98154004e462e2c6eca3cf712b4bcbb84c484dad2ed409d61d149745a4e107251fb74ed63279bfe518653a
-
SSDEEP
6144:zqFKBcr0l3pFBq+2GRuZM/lGVBvJgvhj:2FKaYNnB1H/loJ6j
Static task
static1
Behavioral task
behavioral1
Sample
ff865b56369afeee3a738ce2406e0fc9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff865b56369afeee3a738ce2406e0fc9_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
ff865b56369afeee3a738ce2406e0fc9_JaffaCakes118
-
Size
227KB
-
MD5
ff865b56369afeee3a738ce2406e0fc9
-
SHA1
a8b9fd1d5b863c454325cc1f51e30a14ea2a28df
-
SHA256
97e78b98e54d5c2480c459ac2322aa5bdd0e684dac0c436eca4f66265a6eee92
-
SHA512
d373d5f6b36556dba1b35d0fe9202691d4a060966b98154004e462e2c6eca3cf712b4bcbb84c484dad2ed409d61d149745a4e107251fb74ed63279bfe518653a
-
SSDEEP
6144:zqFKBcr0l3pFBq+2GRuZM/lGVBvJgvhj:2FKaYNnB1H/loJ6j
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-