Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0e0091bc67dfa8e6a6ba3e78766d1fc6_JaffaCakes118
-
Size
317KB
-
Sample
240502-ke9k2sfd24
-
MD5
0e0091bc67dfa8e6a6ba3e78766d1fc6
-
SHA1
2b024ad22b0fda674e9b38e0f90c5bf2cf0defc0
-
SHA256
dce53cefafaabb7c4d50e19d8c352bdaca304f6ec07a2eb87cf77cf29e42fba7
-
SHA512
0713b4b76207c4592f8b0b03bffc60e8487ab3b662639fa223425afaaa5a4da50ad010b8b78f8e6f4bdf8c6beabda9186c24af88f1b140d97a0478c9586fdce8
-
SSDEEP
6144:+0YjywDhq1doBLbii5bkgVuN+xSKV7Wkrsf7LsOSfXVB8KC9bwd:+0AywDhwdiXikbkgaISKVJXv8z9q
Static task
static1
Behavioral task
behavioral1
Sample
0e0091bc67dfa8e6a6ba3e78766d1fc6_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0e0091bc67dfa8e6a6ba3e78766d1fc6_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
0e0091bc67dfa8e6a6ba3e78766d1fc6_JaffaCakes118
-
Size
317KB
-
MD5
0e0091bc67dfa8e6a6ba3e78766d1fc6
-
SHA1
2b024ad22b0fda674e9b38e0f90c5bf2cf0defc0
-
SHA256
dce53cefafaabb7c4d50e19d8c352bdaca304f6ec07a2eb87cf77cf29e42fba7
-
SHA512
0713b4b76207c4592f8b0b03bffc60e8487ab3b662639fa223425afaaa5a4da50ad010b8b78f8e6f4bdf8c6beabda9186c24af88f1b140d97a0478c9586fdce8
-
SSDEEP
6144:+0YjywDhq1doBLbii5bkgVuN+xSKV7Wkrsf7LsOSfXVB8KC9bwd:+0AywDhwdiXikbkgaISKVJXv8z9q
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-