Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0cfb42913fe45b6b7989356999d493f4_JaffaCakes118
-
Size
5.0MB
-
Sample
240625-g1fnbaxelm
-
MD5
0cfb42913fe45b6b7989356999d493f4
-
SHA1
6c505aca4f01f60d459610e991546d1dceabfd47
-
SHA256
dbe205dc5bad1a8598c4b8da25bb4f94dd360b5a6692517d5cdfd70e49fd7191
-
SHA512
dea85606d94968727bd263e0455f542a5ed36a72f89b61cb9fdcfe58a13417b31275c4a95f23fc13b61e833225b9af0739f60e15d27d4fcab1efcb7cd2a50566
-
SSDEEP
98304:StH8TYdl72SNfN2m0aIRRRCKrrKgg0oC5xf30iUtvHfIaE:StH8OqS+RrCqi8831E
Static task
static1
Behavioral task
behavioral1
Sample
0cfb42913fe45b6b7989356999d493f4_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0cfb42913fe45b6b7989356999d493f4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0cfb42913fe45b6b7989356999d493f4_JaffaCakes118
-
Size
5.0MB
-
MD5
0cfb42913fe45b6b7989356999d493f4
-
SHA1
6c505aca4f01f60d459610e991546d1dceabfd47
-
SHA256
dbe205dc5bad1a8598c4b8da25bb4f94dd360b5a6692517d5cdfd70e49fd7191
-
SHA512
dea85606d94968727bd263e0455f542a5ed36a72f89b61cb9fdcfe58a13417b31275c4a95f23fc13b61e833225b9af0739f60e15d27d4fcab1efcb7cd2a50566
-
SSDEEP
98304:StH8TYdl72SNfN2m0aIRRRCKrrKgg0oC5xf30iUtvHfIaE:StH8OqS+RrCqi8831E
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-