Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
026c6a13c4a35e87f2dd384c81ec88db_JaffaCakes118
-
Size
224KB
-
Sample
240620-d2d94a1bmn
-
MD5
026c6a13c4a35e87f2dd384c81ec88db
-
SHA1
882e9cb9a0f87203a3bd5323f310ded6c9f96fc9
-
SHA256
9d5517b5485a0bbe3649ff0b7f3d45d289208471704759514aaefd24615de59f
-
SHA512
a76c9fde522ff3e79bfa9cf915bf0adc13ea6133516173d725043bc345ae0e9edcc802d27b457f7257118be77fcbae1a7d2b86da78a6c21d58f29c25b0ff0db0
-
SSDEEP
6144:9pY1DifkpJFhSpe/+Ij7NweeJEKlJ85eg/0ISDhfq:9pYRisJXKIj3e6Rvd/
Static task
static1
Behavioral task
behavioral1
Sample
026c6a13c4a35e87f2dd384c81ec88db_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
026c6a13c4a35e87f2dd384c81ec88db_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
026c6a13c4a35e87f2dd384c81ec88db_JaffaCakes118
-
Size
224KB
-
MD5
026c6a13c4a35e87f2dd384c81ec88db
-
SHA1
882e9cb9a0f87203a3bd5323f310ded6c9f96fc9
-
SHA256
9d5517b5485a0bbe3649ff0b7f3d45d289208471704759514aaefd24615de59f
-
SHA512
a76c9fde522ff3e79bfa9cf915bf0adc13ea6133516173d725043bc345ae0e9edcc802d27b457f7257118be77fcbae1a7d2b86da78a6c21d58f29c25b0ff0db0
-
SSDEEP
6144:9pY1DifkpJFhSpe/+Ij7NweeJEKlJ85eg/0ISDhfq:9pYRisJXKIj3e6Rvd/
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-