Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
07f232c4fc3e46ca1724aac3797c0aff_JaffaCakes118
-
Size
296KB
-
Sample
240624-meyvnaxdjf
-
MD5
07f232c4fc3e46ca1724aac3797c0aff
-
SHA1
07db6e43353cf2f231d28a0a897007415923fe53
-
SHA256
51270100ecf7b75f92405854f8dff4b5d22d37bb0723711616507611ef716fdf
-
SHA512
3b0bbe9cb676e633c1d290eb1848b3a0a7eaf8067ef0c5ccff388121460d92a99bd9c3d8b67ba669b8698befcad1cbe40964ba38a38735775379468e1b68fd2e
-
SSDEEP
6144:8XU/0tI423nhul2OyApubkF1JfsD1SaPLQB:9cH23niubwzfMS/B
Static task
static1
Behavioral task
behavioral1
Sample
07f232c4fc3e46ca1724aac3797c0aff_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07f232c4fc3e46ca1724aac3797c0aff_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
07f232c4fc3e46ca1724aac3797c0aff_JaffaCakes118
-
Size
296KB
-
MD5
07f232c4fc3e46ca1724aac3797c0aff
-
SHA1
07db6e43353cf2f231d28a0a897007415923fe53
-
SHA256
51270100ecf7b75f92405854f8dff4b5d22d37bb0723711616507611ef716fdf
-
SHA512
3b0bbe9cb676e633c1d290eb1848b3a0a7eaf8067ef0c5ccff388121460d92a99bd9c3d8b67ba669b8698befcad1cbe40964ba38a38735775379468e1b68fd2e
-
SSDEEP
6144:8XU/0tI423nhul2OyApubkF1JfsD1SaPLQB:9cH23niubwzfMS/B
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-