Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0dad3d73d9e47476bd55e2b1cf104fc7_JaffaCakes118
-
Size
273KB
-
Sample
240502-gk9apacf85
-
MD5
0dad3d73d9e47476bd55e2b1cf104fc7
-
SHA1
1f5ccb8c2e7dc8d8851cb8bfd5977a0eaf0f6188
-
SHA256
13386916b2957099a92fefa8fb8307f39575a78b2a6770f9291dfe9e5033e2e7
-
SHA512
278c07874d73832da135ef3e45ebd35878d3d183d2d226a9cc5ba814c190a91e6ec67dd62accf215dc5c0af9d1671e30d75408602b69ea1028be5aa4e64115ed
-
SSDEEP
6144:b4qMZvK7bFvMnxQf+2VoxWnGKT1xwTi6Aw66G:n0qBvcqfdVos4TLLTG
Static task
static1
Behavioral task
behavioral1
Sample
0dad3d73d9e47476bd55e2b1cf104fc7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0dad3d73d9e47476bd55e2b1cf104fc7_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
0dad3d73d9e47476bd55e2b1cf104fc7_JaffaCakes118
-
Size
273KB
-
MD5
0dad3d73d9e47476bd55e2b1cf104fc7
-
SHA1
1f5ccb8c2e7dc8d8851cb8bfd5977a0eaf0f6188
-
SHA256
13386916b2957099a92fefa8fb8307f39575a78b2a6770f9291dfe9e5033e2e7
-
SHA512
278c07874d73832da135ef3e45ebd35878d3d183d2d226a9cc5ba814c190a91e6ec67dd62accf215dc5c0af9d1671e30d75408602b69ea1028be5aa4e64115ed
-
SSDEEP
6144:b4qMZvK7bFvMnxQf+2VoxWnGKT1xwTi6Aw66G:n0qBvcqfdVos4TLLTG
Score8/10-
Creates new service(s)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-