Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
11284382fc9e27caef0052154b9087bc_JaffaCakes118
-
Size
664KB
-
Sample
240504-b6579sdb65
-
MD5
11284382fc9e27caef0052154b9087bc
-
SHA1
19e9cd92d236ba26b7249ac643a4597ea44ef436
-
SHA256
c0435d36c21455c1da3da728df0b95f7c656b009e72fb98b16989b96533dc528
-
SHA512
6ab9a161482f49bcbc8f8e8ef2f0daf1912f3c03b90032f3b3b918d5875f3d1be7c069ebbdf8fb13d7b6d31256b052e8874f50fd1c6a73afb11545d445af4f5d
-
SSDEEP
12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16I:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1D
Static task
static1
Behavioral task
behavioral1
Sample
11284382fc9e27caef0052154b9087bc_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
11284382fc9e27caef0052154b9087bc_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
11284382fc9e27caef0052154b9087bc_JaffaCakes118
-
Size
664KB
-
MD5
11284382fc9e27caef0052154b9087bc
-
SHA1
19e9cd92d236ba26b7249ac643a4597ea44ef436
-
SHA256
c0435d36c21455c1da3da728df0b95f7c656b009e72fb98b16989b96533dc528
-
SHA512
6ab9a161482f49bcbc8f8e8ef2f0daf1912f3c03b90032f3b3b918d5875f3d1be7c069ebbdf8fb13d7b6d31256b052e8874f50fd1c6a73afb11545d445af4f5d
-
SSDEEP
12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16I:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1D
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-