Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b452704f744f8790fef15129a3d9e9ba_JaffaCakes118
-
Size
664KB
-
Sample
240616-tajcqstbqq
-
MD5
b452704f744f8790fef15129a3d9e9ba
-
SHA1
cfdf2626d6288fa70a3f7fe366950c079f57bbd2
-
SHA256
11fe3b1fcc7ecfb05a7e2556de9aece76a4be4ec4dec05aab01134f1e1454553
-
SHA512
07960cfeb2fa7e3d34e2f7e9e17f07d37c18c8bf7089b7548ff6bdf88ba83c549b6912a9019a7b32787ac12ebc9c2f4d33f4f77e08397a94f346df8e0790eafa
-
SSDEEP
12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16Y0:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1W
Static task
static1
Behavioral task
behavioral1
Sample
b452704f744f8790fef15129a3d9e9ba_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b452704f744f8790fef15129a3d9e9ba_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
b452704f744f8790fef15129a3d9e9ba_JaffaCakes118
-
Size
664KB
-
MD5
b452704f744f8790fef15129a3d9e9ba
-
SHA1
cfdf2626d6288fa70a3f7fe366950c079f57bbd2
-
SHA256
11fe3b1fcc7ecfb05a7e2556de9aece76a4be4ec4dec05aab01134f1e1454553
-
SHA512
07960cfeb2fa7e3d34e2f7e9e17f07d37c18c8bf7089b7548ff6bdf88ba83c549b6912a9019a7b32787ac12ebc9c2f4d33f4f77e08397a94f346df8e0790eafa
-
SSDEEP
12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16Y0:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1W
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-