Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
46967b4a94be39ef1e5de697054f004b_JaffaCakes118
-
Size
649KB
-
Sample
240515-rrlhbadf49
-
MD5
46967b4a94be39ef1e5de697054f004b
-
SHA1
bf1337afb18d8b819c8ee4bd3b01f731989be413
-
SHA256
23744945e3c2bee3d8c71955bf3000d283a5d979507e15d65a8bd4ac9568d267
-
SHA512
2bf57e18ac70e845a2083b55ec95cebe9c57dc46d9a8ee28db223529f6bc4a7ce7ba9360ee4b8ae50ec11b5c6e2bd8a968c9a62add17c043ac9c976554834367
-
SSDEEP
12288:Ykcor/aNZzE5wW2UapZbVlnMBJhNdqIs7JbRXU9M8j:5corCwiW2D7bV9sJ/ARxRXYM8j
Static task
static1
Behavioral task
behavioral1
Sample
46967b4a94be39ef1e5de697054f004b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
46967b4a94be39ef1e5de697054f004b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
46967b4a94be39ef1e5de697054f004b_JaffaCakes118
-
Size
649KB
-
MD5
46967b4a94be39ef1e5de697054f004b
-
SHA1
bf1337afb18d8b819c8ee4bd3b01f731989be413
-
SHA256
23744945e3c2bee3d8c71955bf3000d283a5d979507e15d65a8bd4ac9568d267
-
SHA512
2bf57e18ac70e845a2083b55ec95cebe9c57dc46d9a8ee28db223529f6bc4a7ce7ba9360ee4b8ae50ec11b5c6e2bd8a968c9a62add17c043ac9c976554834367
-
SSDEEP
12288:Ykcor/aNZzE5wW2UapZbVlnMBJhNdqIs7JbRXU9M8j:5corCwiW2D7bV9sJ/ARxRXYM8j
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-