Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
20aaeaf0dd9c0209eab13035a49358c1_JaffaCakes118
-
Size
1.6MB
-
Sample
240507-qfz1wshb4s
-
MD5
20aaeaf0dd9c0209eab13035a49358c1
-
SHA1
3071971110d844df6ea33101701861b62b12c9b4
-
SHA256
34f20f8a85fcc289b39ef0a2e15361a77cd94f868208280fbfbdd3344804284b
-
SHA512
b6f254b809f25d1323ce5c9881400edc222f193b387746164069c1cca741fca34ffb68b43cb89fade925e4c4dd9b5ff0355322cd5230525e08840874ac8a2b19
-
SSDEEP
49152:l7GjEwqvFcH8Bx9AD90SsLYOwZep0KbNjP:RvFccBx9k1DKZjP
Static task
static1
Behavioral task
behavioral1
Sample
20aaeaf0dd9c0209eab13035a49358c1_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
20aaeaf0dd9c0209eab13035a49358c1_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
20aaeaf0dd9c0209eab13035a49358c1_JaffaCakes118
-
Size
1.6MB
-
MD5
20aaeaf0dd9c0209eab13035a49358c1
-
SHA1
3071971110d844df6ea33101701861b62b12c9b4
-
SHA256
34f20f8a85fcc289b39ef0a2e15361a77cd94f868208280fbfbdd3344804284b
-
SHA512
b6f254b809f25d1323ce5c9881400edc222f193b387746164069c1cca741fca34ffb68b43cb89fade925e4c4dd9b5ff0355322cd5230525e08840874ac8a2b19
-
SSDEEP
49152:l7GjEwqvFcH8Bx9AD90SsLYOwZep0KbNjP:RvFccBx9k1DKZjP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-