Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
313564e4c04b9e15b92821fe8713938d_JaffaCakes118
-
Size
664KB
-
Sample
240510-1q9cesbf8w
-
MD5
313564e4c04b9e15b92821fe8713938d
-
SHA1
b0161d4ea17c1baec84d677f4bdd0bc8c6214c4d
-
SHA256
14728ab2beb26561418b9acd89e8cd59a3ce074e1902564e664b74b8b156a216
-
SHA512
de0f29b87d0095f592b43acf80f741f3b0c4e5fc53f3c903a548c25411d28fbca20dc5491818a99e9c85c7a4d53f58bc2f22e2c4442caf2d8e2929e2d0ed971c
-
SSDEEP
12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16d:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1i
Static task
static1
Behavioral task
behavioral1
Sample
313564e4c04b9e15b92821fe8713938d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
313564e4c04b9e15b92821fe8713938d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
313564e4c04b9e15b92821fe8713938d_JaffaCakes118
-
Size
664KB
-
MD5
313564e4c04b9e15b92821fe8713938d
-
SHA1
b0161d4ea17c1baec84d677f4bdd0bc8c6214c4d
-
SHA256
14728ab2beb26561418b9acd89e8cd59a3ce074e1902564e664b74b8b156a216
-
SHA512
de0f29b87d0095f592b43acf80f741f3b0c4e5fc53f3c903a548c25411d28fbca20dc5491818a99e9c85c7a4d53f58bc2f22e2c4442caf2d8e2929e2d0ed971c
-
SSDEEP
12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16d:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1i
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-