Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2f01e472eea6c00978e7656e02603bd0_JaffaCakes118
-
Size
56KB
-
Sample
240709-e64k8aweql
-
MD5
2f01e472eea6c00978e7656e02603bd0
-
SHA1
0c4d4263345ca631ab734a7326fa2eba6d61d366
-
SHA256
edc3909319b8c68a4c7c5d2b1f09edf7071086a1bc6b7734129d5e28f694c2af
-
SHA512
05a4547b051727b71efc387337fd0e5ce5eaf7b34b68153a4207a6e473af874e02aed488f7ab159be1bf0f7580b07e3c30c155df38c616d04f63c6353feac6be
-
SSDEEP
768:AtEZo9nSBRSxHZX0SgxzB6I0alAe4SiLpWi6fXRBAjDk38/jf:eH9SqB0/Aq5cl6TuYOjf
Static task
static1
Behavioral task
behavioral1
Sample
2f01e472eea6c00978e7656e02603bd0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f01e472eea6c00978e7656e02603bd0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
2f01e472eea6c00978e7656e02603bd0_JaffaCakes118
-
Size
56KB
-
MD5
2f01e472eea6c00978e7656e02603bd0
-
SHA1
0c4d4263345ca631ab734a7326fa2eba6d61d366
-
SHA256
edc3909319b8c68a4c7c5d2b1f09edf7071086a1bc6b7734129d5e28f694c2af
-
SHA512
05a4547b051727b71efc387337fd0e5ce5eaf7b34b68153a4207a6e473af874e02aed488f7ab159be1bf0f7580b07e3c30c155df38c616d04f63c6353feac6be
-
SSDEEP
768:AtEZo9nSBRSxHZX0SgxzB6I0alAe4SiLpWi6fXRBAjDk38/jf:eH9SqB0/Aq5cl6TuYOjf
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Suspicious use of SetThreadContext
-