Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0a1c59d58ca6ff6470c6781d8b5c03be_JaffaCakes118
-
Size
670KB
-
Sample
240430-tam1xscc38
-
MD5
0a1c59d58ca6ff6470c6781d8b5c03be
-
SHA1
61c1e9194775b476b0d6d42878b7bd1718798b3f
-
SHA256
12fea8c14ac703c58c3779f062da6d67eea00f7236e96c818dec0cbff6ad76f8
-
SHA512
fcc8df8212caa7150b73f1facb09a89bb01bce3c3b92b778ec77bdc6127f4f71e791728eed5c4a72bd19eb03fa239f4356194e3b9ecd9ebcd5a30e7972ae4cf8
-
SSDEEP
12288:VJJsobojeAr644444lIyyazhRHvw3S8dQOKQSjXF2jcjJBAsMbKO/L1kmik7RBsj:HJsobY/NzQdQOUecvpyZ/L1kmik7RBsj
Static task
static1
Behavioral task
behavioral1
Sample
0a1c59d58ca6ff6470c6781d8b5c03be_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0a1c59d58ca6ff6470c6781d8b5c03be_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
0a1c59d58ca6ff6470c6781d8b5c03be_JaffaCakes118
-
Size
670KB
-
MD5
0a1c59d58ca6ff6470c6781d8b5c03be
-
SHA1
61c1e9194775b476b0d6d42878b7bd1718798b3f
-
SHA256
12fea8c14ac703c58c3779f062da6d67eea00f7236e96c818dec0cbff6ad76f8
-
SHA512
fcc8df8212caa7150b73f1facb09a89bb01bce3c3b92b778ec77bdc6127f4f71e791728eed5c4a72bd19eb03fa239f4356194e3b9ecd9ebcd5a30e7972ae4cf8
-
SSDEEP
12288:VJJsobojeAr644444lIyyazhRHvw3S8dQOKQSjXF2jcjJBAsMbKO/L1kmik7RBsj:HJsobY/NzQdQOUecvpyZ/L1kmik7RBsj
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-