Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
38107f5b72f9fe6c53d83114476048df_JaffaCakes118
-
Size
2.1MB
-
Sample
240512-d7nqqaef7z
-
MD5
38107f5b72f9fe6c53d83114476048df
-
SHA1
bc32e8fc0fe729f28a6b6ec8d1edc1a7490e33d2
-
SHA256
bbce5289e5a963841e88f77010848134ba5fb9c1084b7f9533fd170cacee4688
-
SHA512
05c17646eba1cec02b6d6ab20d5d2d4173249c8e3282a48d36de46070817d79fd0c3f86481ea20a4317514b29537cdc9d8a7bda76fee7856a954658d1218dae3
-
SSDEEP
49152:yiqXjFPE6KQaqz5HgrqhPLKqXZj8bTbDyhsotbgJSg79g3Ze7:yzzFM7q1Hg2hP2ouo
Static task
static1
Behavioral task
behavioral1
Sample
38107f5b72f9fe6c53d83114476048df_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
38107f5b72f9fe6c53d83114476048df_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
38107f5b72f9fe6c53d83114476048df_JaffaCakes118
-
Size
2.1MB
-
MD5
38107f5b72f9fe6c53d83114476048df
-
SHA1
bc32e8fc0fe729f28a6b6ec8d1edc1a7490e33d2
-
SHA256
bbce5289e5a963841e88f77010848134ba5fb9c1084b7f9533fd170cacee4688
-
SHA512
05c17646eba1cec02b6d6ab20d5d2d4173249c8e3282a48d36de46070817d79fd0c3f86481ea20a4317514b29537cdc9d8a7bda76fee7856a954658d1218dae3
-
SSDEEP
49152:yiqXjFPE6KQaqz5HgrqhPLKqXZj8bTbDyhsotbgJSg79g3Ze7:yzzFM7q1Hg2hP2ouo
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-