Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1927d5a81b3828dad2dcd9c70716f94d_JaffaCakes118
-
Size
1.1MB
-
Sample
240628-hgb2fswcne
-
MD5
1927d5a81b3828dad2dcd9c70716f94d
-
SHA1
14f35671f902d849e240fb58c9cdcad0789d240f
-
SHA256
1c9940693fab631038ecce7f5b3a24d64b85e9a5de89d2db0bcc96bec23fea72
-
SHA512
9913634319ef1210c3bb61c602515d7975774b5d8fd0006c9789067a1292e746a8380c1b5f553195679cfa3ac68441a23e5f76364c61f7bc74df6c4e7aea2f8f
-
SSDEEP
24576:cuYOHRLthh3zCvKNvU1jExgSs2oZP8bkVzzmuAhFEJmQFe:S4hhBUCvDe2oZlzjAZ
Behavioral task
behavioral1
Sample
1927d5a81b3828dad2dcd9c70716f94d_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1927d5a81b3828dad2dcd9c70716f94d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
1927d5a81b3828dad2dcd9c70716f94d_JaffaCakes118
-
Size
1.1MB
-
MD5
1927d5a81b3828dad2dcd9c70716f94d
-
SHA1
14f35671f902d849e240fb58c9cdcad0789d240f
-
SHA256
1c9940693fab631038ecce7f5b3a24d64b85e9a5de89d2db0bcc96bec23fea72
-
SHA512
9913634319ef1210c3bb61c602515d7975774b5d8fd0006c9789067a1292e746a8380c1b5f553195679cfa3ac68441a23e5f76364c61f7bc74df6c4e7aea2f8f
-
SSDEEP
24576:cuYOHRLthh3zCvKNvU1jExgSs2oZP8bkVzzmuAhFEJmQFe:S4hhBUCvDe2oZlzjAZ
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-