Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
189851836e7c3c836a36cbd4e5d00dce_JaffaCakes118
-
Size
74KB
-
Sample
240628-dvdpzs1dql
-
MD5
189851836e7c3c836a36cbd4e5d00dce
-
SHA1
e1ceb793467c8fb1442a3e3a581c4151275559dd
-
SHA256
ce46a492a3abc1faab1e4a6e3ae430b8c68b858cba204d7a86f16bba19683661
-
SHA512
b7caeb94c2a7e6cba9073ced87de0ad425dd0a212af5b2698ed8c2958b5be51596d514d875eb227fb6c9f3503a0ed916fa3926cbd4a2587ebb5eb6af911d9e89
-
SSDEEP
1536:t0JUpReIXnb72L31MPuH/i9cPdbZdDc7rqUDJxjayej6mQ9:txSI3/2Dfq9cPdIDJxGyH9
Static task
static1
Behavioral task
behavioral1
Sample
189851836e7c3c836a36cbd4e5d00dce_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
189851836e7c3c836a36cbd4e5d00dce_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
189851836e7c3c836a36cbd4e5d00dce_JaffaCakes118
-
Size
74KB
-
MD5
189851836e7c3c836a36cbd4e5d00dce
-
SHA1
e1ceb793467c8fb1442a3e3a581c4151275559dd
-
SHA256
ce46a492a3abc1faab1e4a6e3ae430b8c68b858cba204d7a86f16bba19683661
-
SHA512
b7caeb94c2a7e6cba9073ced87de0ad425dd0a212af5b2698ed8c2958b5be51596d514d875eb227fb6c9f3503a0ed916fa3926cbd4a2587ebb5eb6af911d9e89
-
SSDEEP
1536:t0JUpReIXnb72L31MPuH/i9cPdbZdDc7rqUDJxjayej6mQ9:txSI3/2Dfq9cPdIDJxGyH9
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-