Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
29de1dc21a65b49a8200ab3757e522c1_JaffaCakes118
-
Size
362KB
-
Sample
240707-ktflhs1aje
-
MD5
29de1dc21a65b49a8200ab3757e522c1
-
SHA1
973ed7785f3c2fa95c9088e5dfb144e15b46acce
-
SHA256
d99c15d25afca7138111f2e0c16dd10ae709363171368104bc5c37295f2aa5c8
-
SHA512
980396a83c29ab816392ce636186d80b0aa4a05e1af4ad63dacd0943a402f97fe3f95d16a7d34c43b82fd0d9b43e4f85a5ba17202529ca9ad1ae10916790c9b1
-
SSDEEP
6144:rFw8wzBhaEUJ45mnko24abdzVl87D583LWKsqzGv+1AiW/T26IF6Y34Q1oZQkYH3:rFszBhqS5m2DuJ87WKRzG4AiW7nWpGmd
Static task
static1
Behavioral task
behavioral1
Sample
29de1dc21a65b49a8200ab3757e522c1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29de1dc21a65b49a8200ab3757e522c1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
29de1dc21a65b49a8200ab3757e522c1_JaffaCakes118
-
Size
362KB
-
MD5
29de1dc21a65b49a8200ab3757e522c1
-
SHA1
973ed7785f3c2fa95c9088e5dfb144e15b46acce
-
SHA256
d99c15d25afca7138111f2e0c16dd10ae709363171368104bc5c37295f2aa5c8
-
SHA512
980396a83c29ab816392ce636186d80b0aa4a05e1af4ad63dacd0943a402f97fe3f95d16a7d34c43b82fd0d9b43e4f85a5ba17202529ca9ad1ae10916790c9b1
-
SSDEEP
6144:rFw8wzBhaEUJ45mnko24abdzVl87D583LWKsqzGv+1AiW/T26IF6Y34Q1oZQkYH3:rFszBhqS5m2DuJ87WKRzG4AiW7nWpGmd
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-