Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2f25cbad07c3fe02e572a21514bb25ce_JaffaCakes118
-
Size
1.1MB
-
Sample
240709-f853hayblq
-
MD5
2f25cbad07c3fe02e572a21514bb25ce
-
SHA1
e7fd2180e6a7da20b5ee9b0c5071f0e82d241bf6
-
SHA256
8063ca1dc808a1cee7c276d7ac4c883a5b13387f9ddeeceea5edf930575fe007
-
SHA512
d4250de5c6793205af299a890632f8f471f3cb2ed9894fa42442339b24eec2e1a0fd867a632217d59f14593226d51e003ff931e58f9068b188a1ae1950e3a99b
-
SSDEEP
24576:WmYnXv5aoGJ5ZbXfn8Qg4O5ZMxp3JESywkjBDlj9vEqq1:8XvURZb/1jp3PywkFlj9vi
Behavioral task
behavioral1
Sample
2f25cbad07c3fe02e572a21514bb25ce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f25cbad07c3fe02e572a21514bb25ce_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
2f25cbad07c3fe02e572a21514bb25ce_JaffaCakes118
-
Size
1.1MB
-
MD5
2f25cbad07c3fe02e572a21514bb25ce
-
SHA1
e7fd2180e6a7da20b5ee9b0c5071f0e82d241bf6
-
SHA256
8063ca1dc808a1cee7c276d7ac4c883a5b13387f9ddeeceea5edf930575fe007
-
SHA512
d4250de5c6793205af299a890632f8f471f3cb2ed9894fa42442339b24eec2e1a0fd867a632217d59f14593226d51e003ff931e58f9068b188a1ae1950e3a99b
-
SSDEEP
24576:WmYnXv5aoGJ5ZbXfn8Qg4O5ZMxp3JESywkjBDlj9vEqq1:8XvURZb/1jp3PywkFlj9vi
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-