Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2a171268b910b9efe97d7663487603b8_JaffaCakes118
-
Size
295KB
-
Sample
240707-2z7evs1aml
-
MD5
2a171268b910b9efe97d7663487603b8
-
SHA1
d55f941f0a6e9d9354c8a0f44427428c9ba7a932
-
SHA256
991c02642077dbf3179f88a0364f68de9f7e5e3704dde3dec87238d779c6eaa0
-
SHA512
ca4b602acede37ee5ad50e3cbfacab9a5e14f0d393b3b0060d169a6e36dd182e8e515b0ceda6d791cb0eb0f330849bc935ff517c105df53fc3c279844cd349c7
-
SSDEEP
6144:S2gon3w1WG6wPTqbhJTtNSDpxDPcfp3U8p:SWnAwC2FJ5NTp
Static task
static1
Behavioral task
behavioral1
Sample
2a171268b910b9efe97d7663487603b8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a171268b910b9efe97d7663487603b8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
2a171268b910b9efe97d7663487603b8_JaffaCakes118
-
Size
295KB
-
MD5
2a171268b910b9efe97d7663487603b8
-
SHA1
d55f941f0a6e9d9354c8a0f44427428c9ba7a932
-
SHA256
991c02642077dbf3179f88a0364f68de9f7e5e3704dde3dec87238d779c6eaa0
-
SHA512
ca4b602acede37ee5ad50e3cbfacab9a5e14f0d393b3b0060d169a6e36dd182e8e515b0ceda6d791cb0eb0f330849bc935ff517c105df53fc3c279844cd349c7
-
SSDEEP
6144:S2gon3w1WG6wPTqbhJTtNSDpxDPcfp3U8p:SWnAwC2FJ5NTp
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-