Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2950e8899ea68c1ce21014e1c968064f_JaffaCakes118
-
Size
340KB
-
Sample
240706-xwwrqstbmb
-
MD5
2950e8899ea68c1ce21014e1c968064f
-
SHA1
1218a0593e15191f637348515f1acb6b1bf64015
-
SHA256
7b122d09ebc4db4d256771a01ab941cb41e9aae198ded32cf45840545b79f358
-
SHA512
7f980959f4c77164670287bffa653bdbdece1f0a7879c351b78e3abf70668f7927ac6fad6442675b6250b5f6d179f38d8b669856be4d7986ca6afd178f9f08dc
-
SSDEEP
6144:8uulnSo2oAjS88wwDxznbt2NBT8KhWV8xlrYg1fmJCnkMiLyJo0bIkZ:8lTRAsHNnbMdXsilrz+Ck2TIw
Static task
static1
Behavioral task
behavioral1
Sample
2950e8899ea68c1ce21014e1c968064f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2950e8899ea68c1ce21014e1c968064f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
2950e8899ea68c1ce21014e1c968064f_JaffaCakes118
-
Size
340KB
-
MD5
2950e8899ea68c1ce21014e1c968064f
-
SHA1
1218a0593e15191f637348515f1acb6b1bf64015
-
SHA256
7b122d09ebc4db4d256771a01ab941cb41e9aae198ded32cf45840545b79f358
-
SHA512
7f980959f4c77164670287bffa653bdbdece1f0a7879c351b78e3abf70668f7927ac6fad6442675b6250b5f6d179f38d8b669856be4d7986ca6afd178f9f08dc
-
SSDEEP
6144:8uulnSo2oAjS88wwDxznbt2NBT8KhWV8xlrYg1fmJCnkMiLyJo0bIkZ:8lTRAsHNnbMdXsilrz+Ck2TIw
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-