Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0f94ca18b66a6bc523da99b52b47c947_JaffaCakes118
-
Size
140KB
-
Sample
240625-z9lj2awhpl
-
MD5
0f94ca18b66a6bc523da99b52b47c947
-
SHA1
64e31c5ac914e6d1bb4df57cd2bc33f9ed088c4f
-
SHA256
824d5e30a658d3a67d2377e7f97bc33811f7680ce950cc602d5f7cd6a4c76ae5
-
SHA512
e7c69e97c57d351451e3d5073c0a720524839235f96a983cc70f62624005b2ace0b9e179ddc68730e91ab627a582b47f2823f11e04a55f4ac101e3458f2207d7
-
SSDEEP
3072:tY2TEm50QYyAXBYeNgn6gb0kYp8OyDn8+rkP+7x8Dzve:tJTEOPYywBYeUpb0kYp8OyDn8+rkP+7l
Static task
static1
Behavioral task
behavioral1
Sample
0f94ca18b66a6bc523da99b52b47c947_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f94ca18b66a6bc523da99b52b47c947_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
0f94ca18b66a6bc523da99b52b47c947_JaffaCakes118
-
Size
140KB
-
MD5
0f94ca18b66a6bc523da99b52b47c947
-
SHA1
64e31c5ac914e6d1bb4df57cd2bc33f9ed088c4f
-
SHA256
824d5e30a658d3a67d2377e7f97bc33811f7680ce950cc602d5f7cd6a4c76ae5
-
SHA512
e7c69e97c57d351451e3d5073c0a720524839235f96a983cc70f62624005b2ace0b9e179ddc68730e91ab627a582b47f2823f11e04a55f4ac101e3458f2207d7
-
SSDEEP
3072:tY2TEm50QYyAXBYeNgn6gb0kYp8OyDn8+rkP+7x8Dzve:tJTEOPYywBYeUpb0kYp8OyDn8+rkP+7l
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-