Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
05f95d3cf36891fc733800f3b3ffbfb4_JaffaCakes118
-
Size
484KB
-
Sample
240620-pme4ma1fqj
-
MD5
05f95d3cf36891fc733800f3b3ffbfb4
-
SHA1
8897bcc054911642e637028acc5fa8ecafe517fb
-
SHA256
5079781bf327d46ca28fd70481c15bfb7d12b56f98465acae45759be47e424b1
-
SHA512
e5a6ffb1c6af27f0a9c6d6b7a10fecb406e268e0c4af6fadfb2e0e2a11f1e5577a72cb46c2046475af900a955f7969bd6f8e392d5cedf70a2a981d761288361f
-
SSDEEP
12288:XoUld/f2I9JECdYW4/e4Pii15XZSAmKjlafbdDNUQ:X92ILECd0R15XZS3QafpDNUQ
Static task
static1
Behavioral task
behavioral1
Sample
05f95d3cf36891fc733800f3b3ffbfb4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05f95d3cf36891fc733800f3b3ffbfb4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
05f95d3cf36891fc733800f3b3ffbfb4_JaffaCakes118
-
Size
484KB
-
MD5
05f95d3cf36891fc733800f3b3ffbfb4
-
SHA1
8897bcc054911642e637028acc5fa8ecafe517fb
-
SHA256
5079781bf327d46ca28fd70481c15bfb7d12b56f98465acae45759be47e424b1
-
SHA512
e5a6ffb1c6af27f0a9c6d6b7a10fecb406e268e0c4af6fadfb2e0e2a11f1e5577a72cb46c2046475af900a955f7969bd6f8e392d5cedf70a2a981d761288361f
-
SSDEEP
12288:XoUld/f2I9JECdYW4/e4Pii15XZSAmKjlafbdDNUQ:X92ILECd0R15XZS3QafpDNUQ
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Suspicious use of SetThreadContext
-