Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ae8409fe06fd2d83804a8f7a1e6d9d64_JaffaCakes118
-
Size
664KB
-
Sample
240615-p44tba1emc
-
MD5
ae8409fe06fd2d83804a8f7a1e6d9d64
-
SHA1
047d420df972bf65439cc63ddf70402c13773793
-
SHA256
04a3fbf47bbc0c8f70bb01046668b26be6a04042f711cb7fc530b32afa1c7296
-
SHA512
ea35998d6e7e0ec4299be7288f4b8f02fbd86ade9667afc02c414424ad24b9128f9dbb6d8d1740784e6f2fd637d4ccf1a585bea7803a886d5bde7cbbf15e6e2f
-
SSDEEP
12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16a:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1t
Static task
static1
Behavioral task
behavioral1
Sample
ae8409fe06fd2d83804a8f7a1e6d9d64_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ae8409fe06fd2d83804a8f7a1e6d9d64_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
ae8409fe06fd2d83804a8f7a1e6d9d64_JaffaCakes118
-
Size
664KB
-
MD5
ae8409fe06fd2d83804a8f7a1e6d9d64
-
SHA1
047d420df972bf65439cc63ddf70402c13773793
-
SHA256
04a3fbf47bbc0c8f70bb01046668b26be6a04042f711cb7fc530b32afa1c7296
-
SHA512
ea35998d6e7e0ec4299be7288f4b8f02fbd86ade9667afc02c414424ad24b9128f9dbb6d8d1740784e6f2fd637d4ccf1a585bea7803a886d5bde7cbbf15e6e2f
-
SSDEEP
12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16a:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1t
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-