Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
225faf8ea022aaf774a8796c8b485ec4_JaffaCakes118
-
Size
212KB
-
Sample
240703-pgx29atfka
-
MD5
225faf8ea022aaf774a8796c8b485ec4
-
SHA1
630686bb806fe657ecc2a3f179662bd8dd108aa1
-
SHA256
701d1257c352f0ae0025ef41bc407cf4df145c1f95eb83e3f32d337ed8d8b08b
-
SHA512
0aea357c64981ffece5a7134104debd2d85adcaca054c7406c4c0ae7b94bc2e0c3ce4412bb3559c98c165d533ce7a5916cbced26b320205cf1689553f53e65ad
-
SSDEEP
6144:SRpD5AFwzWQ8heLz+PTbCH74/gvjUsCFKnvmb7/D260RFeG2H4Xxze1ILweo8VnK:QDSFwROPTbCH74/gvjUsCFKnvmb7/D24
Static task
static1
Behavioral task
behavioral1
Sample
225faf8ea022aaf774a8796c8b485ec4_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
225faf8ea022aaf774a8796c8b485ec4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
225faf8ea022aaf774a8796c8b485ec4_JaffaCakes118
-
Size
212KB
-
MD5
225faf8ea022aaf774a8796c8b485ec4
-
SHA1
630686bb806fe657ecc2a3f179662bd8dd108aa1
-
SHA256
701d1257c352f0ae0025ef41bc407cf4df145c1f95eb83e3f32d337ed8d8b08b
-
SHA512
0aea357c64981ffece5a7134104debd2d85adcaca054c7406c4c0ae7b94bc2e0c3ce4412bb3559c98c165d533ce7a5916cbced26b320205cf1689553f53e65ad
-
SSDEEP
6144:SRpD5AFwzWQ8heLz+PTbCH74/gvjUsCFKnvmb7/D260RFeG2H4Xxze1ILweo8VnK:QDSFwROPTbCH74/gvjUsCFKnvmb7/D24
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-