Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
29bc82a46b9cd9a6a50c031da2bfcef8_JaffaCakes118
-
Size
1.1MB
-
Sample
240707-faxngatfpr
-
MD5
29bc82a46b9cd9a6a50c031da2bfcef8
-
SHA1
96a5898c184cfb940d01ae2a6e42a42e661f6a69
-
SHA256
35132f1ba95107ec2bb3251f0f0c05062dae3e8dcf2ec011009adddc8482d42b
-
SHA512
17a7155083ed2c0df9ffc00f49f4de5fed9b3c0ed9b1b36a01fdf86a124bcf4537b91c92bb4af29636e5ee77530bcd48b79b49a9847dcf99b7c8fcf1c8a4c89a
-
SSDEEP
24576:mD3euKmLCkWZ+58gcHTrlQzSraIKu78ThO3pEUaUTV4s:43+pFs5OHXLaI8KaUT
Behavioral task
behavioral1
Sample
29bc82a46b9cd9a6a50c031da2bfcef8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29bc82a46b9cd9a6a50c031da2bfcef8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
29bc82a46b9cd9a6a50c031da2bfcef8_JaffaCakes118
-
Size
1.1MB
-
MD5
29bc82a46b9cd9a6a50c031da2bfcef8
-
SHA1
96a5898c184cfb940d01ae2a6e42a42e661f6a69
-
SHA256
35132f1ba95107ec2bb3251f0f0c05062dae3e8dcf2ec011009adddc8482d42b
-
SHA512
17a7155083ed2c0df9ffc00f49f4de5fed9b3c0ed9b1b36a01fdf86a124bcf4537b91c92bb4af29636e5ee77530bcd48b79b49a9847dcf99b7c8fcf1c8a4c89a
-
SSDEEP
24576:mD3euKmLCkWZ+58gcHTrlQzSraIKu78ThO3pEUaUTV4s:43+pFs5OHXLaI8KaUT
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-