Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
95eecc510b3f188ae7b09cf6591bcd00_JaffaCakes118
-
Size
584KB
-
Sample
240604-xpdmksgc8x
-
MD5
95eecc510b3f188ae7b09cf6591bcd00
-
SHA1
958a558876b2200e9f4e446cfb182d1b7e927bbd
-
SHA256
afcae21fa43fd3fa7eaf390105f1c71fca2d3aaab52553093a8723e6c97bc18a
-
SHA512
d4bb58790fa657cb77216a268ae8d1d791a736f553575a4a0d7b486abc4455c637f3b4a7afe179c2010c77e2fb735820d3a68302d4c842eb4217245db174fcae
-
SSDEEP
12288:TQVGxSAYJAesRDYwdvXlyJXQ4AxpGnc1PwdQBWJ1AAxEA4:Y48ieWbtU4c0PIkW3AAC
Static task
static1
Behavioral task
behavioral1
Sample
95eecc510b3f188ae7b09cf6591bcd00_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
95eecc510b3f188ae7b09cf6591bcd00_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
95eecc510b3f188ae7b09cf6591bcd00_JaffaCakes118
-
Size
584KB
-
MD5
95eecc510b3f188ae7b09cf6591bcd00
-
SHA1
958a558876b2200e9f4e446cfb182d1b7e927bbd
-
SHA256
afcae21fa43fd3fa7eaf390105f1c71fca2d3aaab52553093a8723e6c97bc18a
-
SHA512
d4bb58790fa657cb77216a268ae8d1d791a736f553575a4a0d7b486abc4455c637f3b4a7afe179c2010c77e2fb735820d3a68302d4c842eb4217245db174fcae
-
SSDEEP
12288:TQVGxSAYJAesRDYwdvXlyJXQ4AxpGnc1PwdQBWJ1AAxEA4:Y48ieWbtU4c0PIkW3AAC
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-