Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
29874717228ce7bf0dcdb9f5fa948ecb_JaffaCakes118
-
Size
152KB
-
Sample
240706-22j3caycka
-
MD5
29874717228ce7bf0dcdb9f5fa948ecb
-
SHA1
077a09db5bf8610bd92b2d00dee5c632b3e7981c
-
SHA256
f246c8f3da995f23eb12c1b0430bcb723a2d3a3c9b447d9b588a002ad34f5396
-
SHA512
c13b87f215fc4995b8fec285e08ab6b61ec1b45287b442ce7e12017ced1c13a82d9c86b376bee92222f1d99b336acb0c22574c9125a0352a73a469ff8948b33e
-
SSDEEP
3072:LMG4PYYh0Z1+7DxNUbaxIcz93bOButK+ooO:L+7DxVh3bHdO
Static task
static1
Behavioral task
behavioral1
Sample
29874717228ce7bf0dcdb9f5fa948ecb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29874717228ce7bf0dcdb9f5fa948ecb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
29874717228ce7bf0dcdb9f5fa948ecb_JaffaCakes118
-
Size
152KB
-
MD5
29874717228ce7bf0dcdb9f5fa948ecb
-
SHA1
077a09db5bf8610bd92b2d00dee5c632b3e7981c
-
SHA256
f246c8f3da995f23eb12c1b0430bcb723a2d3a3c9b447d9b588a002ad34f5396
-
SHA512
c13b87f215fc4995b8fec285e08ab6b61ec1b45287b442ce7e12017ced1c13a82d9c86b376bee92222f1d99b336acb0c22574c9125a0352a73a469ff8948b33e
-
SSDEEP
3072:LMG4PYYh0Z1+7DxNUbaxIcz93bOButK+ooO:L+7DxVh3bHdO
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-