Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0e0d4cddfd6a1f5c178c59cc42833872_JaffaCakes118
-
Size
100KB
-
Sample
240625-pjghaazama
-
MD5
0e0d4cddfd6a1f5c178c59cc42833872
-
SHA1
bf962e8824b9fd47d7545258a8e7febedff4f1a6
-
SHA256
73ccb2f55e1a7b06ed2662edc030085ee86c4e7d6a747761aa2318d495171b24
-
SHA512
aaf48a9f2de306fe5e2ad2d97e82e65022c3e69041d881e6977ae2263a866fae5bbcbba8abdf7edf7d09bab88ddb6528a0a7bc4eaf05e77c918db62f2f231282
-
SSDEEP
1536:xVt0M82NTdwXRLGZcYADZPU1+73BD88b0nyyNIjP:LwXwgZPUQJyCP
Static task
static1
Behavioral task
behavioral1
Sample
0e0d4cddfd6a1f5c178c59cc42833872_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e0d4cddfd6a1f5c178c59cc42833872_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0e0d4cddfd6a1f5c178c59cc42833872_JaffaCakes118
-
Size
100KB
-
MD5
0e0d4cddfd6a1f5c178c59cc42833872
-
SHA1
bf962e8824b9fd47d7545258a8e7febedff4f1a6
-
SHA256
73ccb2f55e1a7b06ed2662edc030085ee86c4e7d6a747761aa2318d495171b24
-
SHA512
aaf48a9f2de306fe5e2ad2d97e82e65022c3e69041d881e6977ae2263a866fae5bbcbba8abdf7edf7d09bab88ddb6528a0a7bc4eaf05e77c918db62f2f231282
-
SSDEEP
1536:xVt0M82NTdwXRLGZcYADZPU1+73BD88b0nyyNIjP:LwXwgZPUQJyCP
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-