Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
15664ff00b7a6496d48d633b7812ab94_JaffaCakes118
-
Size
85KB
-
Sample
240627-kwgatsshpd
-
MD5
15664ff00b7a6496d48d633b7812ab94
-
SHA1
cb3ebedbe023ca5884d552f67d9a3f409b0fdc50
-
SHA256
4f7bab60cdd8b4623e470eaa8bfebfd840e069c834a953025b49289d7277a071
-
SHA512
680771d2017e8f7118c46d679bf8ea65241855d2e8c7e40dce3c2740d90d03704b0e937ee05e51819788d5662eb26c7830fc490f65bac6c51fc7a8a1afa3e7a3
-
SSDEEP
1536:CAi7V6+EZFCttj4E56r+Ov4DVwMXZ7sRIMrHWTaWr7UlTn5YjYpeeO6T:CAi7U1kuE5yXEDPa27UnYspFv
Static task
static1
Behavioral task
behavioral1
Sample
15664ff00b7a6496d48d633b7812ab94_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15664ff00b7a6496d48d633b7812ab94_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
15664ff00b7a6496d48d633b7812ab94_JaffaCakes118
-
Size
85KB
-
MD5
15664ff00b7a6496d48d633b7812ab94
-
SHA1
cb3ebedbe023ca5884d552f67d9a3f409b0fdc50
-
SHA256
4f7bab60cdd8b4623e470eaa8bfebfd840e069c834a953025b49289d7277a071
-
SHA512
680771d2017e8f7118c46d679bf8ea65241855d2e8c7e40dce3c2740d90d03704b0e937ee05e51819788d5662eb26c7830fc490f65bac6c51fc7a8a1afa3e7a3
-
SSDEEP
1536:CAi7V6+EZFCttj4E56r+Ov4DVwMXZ7sRIMrHWTaWr7UlTn5YjYpeeO6T:CAi7U1kuE5yXEDPa27UnYspFv
Score8/10-
Server Software Component: Terminal Services DLL
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-