Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0cf3c2aee431475d75bc79d5ea323730_JaffaCakes118
-
Size
104KB
-
Sample
240625-gvlmdaxcqj
-
MD5
0cf3c2aee431475d75bc79d5ea323730
-
SHA1
313f4eb1ea98af681ada997d9f46c9ef41f6f31a
-
SHA256
2387103da53a8e52093bac68243569c265e23129db6d874ee29c24c9d229698d
-
SHA512
5f8b76dc9fa3d84a577499dc2e64e31b4c9460a6bc3f82be0c7efc652717135e1144584f207259e3ab609c902d28d276ff8e4a8c113e9e42826cf162bbd5eb5e
-
SSDEEP
1536:ngTJCNMiJ0dxUEy5beFI5sxyCNYwUch0IdTh8evcmmt0DH:n2JhCgPCR41hWevcmmt0DH
Static task
static1
Behavioral task
behavioral1
Sample
0cf3c2aee431475d75bc79d5ea323730_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0cf3c2aee431475d75bc79d5ea323730_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0cf3c2aee431475d75bc79d5ea323730_JaffaCakes118
-
Size
104KB
-
MD5
0cf3c2aee431475d75bc79d5ea323730
-
SHA1
313f4eb1ea98af681ada997d9f46c9ef41f6f31a
-
SHA256
2387103da53a8e52093bac68243569c265e23129db6d874ee29c24c9d229698d
-
SHA512
5f8b76dc9fa3d84a577499dc2e64e31b4c9460a6bc3f82be0c7efc652717135e1144584f207259e3ab609c902d28d276ff8e4a8c113e9e42826cf162bbd5eb5e
-
SSDEEP
1536:ngTJCNMiJ0dxUEy5beFI5sxyCNYwUch0IdTh8evcmmt0DH:n2JhCgPCR41hWevcmmt0DH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-