Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4868d3472b052f41b6a109d37a73f70e_JaffaCakes118
-
Size
671KB
-
Sample
240515-2sl6cagd82
-
MD5
4868d3472b052f41b6a109d37a73f70e
-
SHA1
224a455a527bc8f13925c1514bc21f0eee58a427
-
SHA256
0699e9bb5474e0f9f1e2437bb1129f964209e41a16b4548460e53d33c495d035
-
SHA512
6af737018be86fb914ad82716d3eca6ccb7611723ccf6186ebf82d1ae5b14882cf9a23c70ee951f82e8a06ae4060c161b452c987979eb6d6ee36e4e158b91707
-
SSDEEP
12288:SZJ7G1zskWtP44444ItPZkTKpPwHb/dgusOlMLSTQNirbCfrL6S:qJ7Uzj4yUo7Fdle8WIbCL6S
Static task
static1
Behavioral task
behavioral1
Sample
4868d3472b052f41b6a109d37a73f70e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4868d3472b052f41b6a109d37a73f70e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
4868d3472b052f41b6a109d37a73f70e_JaffaCakes118
-
Size
671KB
-
MD5
4868d3472b052f41b6a109d37a73f70e
-
SHA1
224a455a527bc8f13925c1514bc21f0eee58a427
-
SHA256
0699e9bb5474e0f9f1e2437bb1129f964209e41a16b4548460e53d33c495d035
-
SHA512
6af737018be86fb914ad82716d3eca6ccb7611723ccf6186ebf82d1ae5b14882cf9a23c70ee951f82e8a06ae4060c161b452c987979eb6d6ee36e4e158b91707
-
SSDEEP
12288:SZJ7G1zskWtP44444ItPZkTKpPwHb/dgusOlMLSTQNirbCfrL6S:qJ7Uzj4yUo7Fdle8WIbCL6S
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-