Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
63428b3f59dfb0b2fc560515a3f54b5c_JaffaCakes118
-
Size
1.1MB
-
Sample
240521-pfnr7add7t
-
MD5
63428b3f59dfb0b2fc560515a3f54b5c
-
SHA1
9a871d5c297a8159a0f60009df0543ba86b0387a
-
SHA256
6b0f76c2e89c5ce7750b7f06ce1fed5e1eea5f723aaaa9068fbd5ab0d146f7fe
-
SHA512
97ab74c419b1e0fc19be0cbb0b2e4f29c6822c6ef35ce074eb0586b3ee0a11029564dc219733739c9a6b5f0d30ed9d33040c0c517d5a2e1826b5e652675fc300
-
SSDEEP
12288:XsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQi:8V4W8hqBYgnBLfVqx1Wjkv
Static task
static1
Behavioral task
behavioral1
Sample
63428b3f59dfb0b2fc560515a3f54b5c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
63428b3f59dfb0b2fc560515a3f54b5c_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
63428b3f59dfb0b2fc560515a3f54b5c_JaffaCakes118
-
Size
1.1MB
-
MD5
63428b3f59dfb0b2fc560515a3f54b5c
-
SHA1
9a871d5c297a8159a0f60009df0543ba86b0387a
-
SHA256
6b0f76c2e89c5ce7750b7f06ce1fed5e1eea5f723aaaa9068fbd5ab0d146f7fe
-
SHA512
97ab74c419b1e0fc19be0cbb0b2e4f29c6822c6ef35ce074eb0586b3ee0a11029564dc219733739c9a6b5f0d30ed9d33040c0c517d5a2e1826b5e652675fc300
-
SSDEEP
12288:XsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQi:8V4W8hqBYgnBLfVqx1Wjkv
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-