Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
48e1bce53c5a67ba932e14a2ff2c581d_JaffaCakes118
-
Size
667KB
-
Sample
240516-bhjz5adc8v
-
MD5
48e1bce53c5a67ba932e14a2ff2c581d
-
SHA1
19e4d21efeacbd608883a10d3acb0489b2b4c84f
-
SHA256
046b02492be9724cfc32b7dd363d99e3f2aef7696e4b5befcc1a52f9fdc8eb55
-
SHA512
5737bd6ceb664285c6119e4e9fef64faf8608f643513e35dec72a6e29e20254575f6aea31c35f90f8d9708fc102557d5ff51d706c8fd67f2b607c527c8919d9c
-
SSDEEP
12288:T8rqkM4RxFPeGUEyD8V5SJVvImhxhBDRR6Oifc3OY3MCP9rdOb6x:QrqkM4AGUAjSJVrhxhZRCYljOb6x
Static task
static1
Behavioral task
behavioral1
Sample
48e1bce53c5a67ba932e14a2ff2c581d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
48e1bce53c5a67ba932e14a2ff2c581d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
48e1bce53c5a67ba932e14a2ff2c581d_JaffaCakes118
-
Size
667KB
-
MD5
48e1bce53c5a67ba932e14a2ff2c581d
-
SHA1
19e4d21efeacbd608883a10d3acb0489b2b4c84f
-
SHA256
046b02492be9724cfc32b7dd363d99e3f2aef7696e4b5befcc1a52f9fdc8eb55
-
SHA512
5737bd6ceb664285c6119e4e9fef64faf8608f643513e35dec72a6e29e20254575f6aea31c35f90f8d9708fc102557d5ff51d706c8fd67f2b607c527c8919d9c
-
SSDEEP
12288:T8rqkM4RxFPeGUEyD8V5SJVvImhxhBDRR6Oifc3OY3MCP9rdOb6x:QrqkM4AGUAjSJVrhxhZRCYljOb6x
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-