Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
31ba85d1725be33d4bc0f195780e7fd4_JaffaCakes118
-
Size
37KB
-
Sample
240709-yg5xjasarl
-
MD5
31ba85d1725be33d4bc0f195780e7fd4
-
SHA1
4019f250e03fd110982c87db3e254df5603c849f
-
SHA256
24d798837b7b27dfdd3732e4ba091404b204442fccefc00bc96e61264d00baae
-
SHA512
ff56bfc8a38290d016e0392654165516e02a20ac234f7484fc20b6d50b8f510b1258dcf9d9a33df8c8121a10fee09198d925031e21318334562a8c8e5c751974
-
SSDEEP
768:ejCyzmmRmDyt1+h3TPjDsDIZ6HQrsNMp5/WFn1iFJzuD6rwA:WzmmRmDy3s3TPj+IKQDp5eFn1iF26rV
Static task
static1
Behavioral task
behavioral1
Sample
31ba85d1725be33d4bc0f195780e7fd4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31ba85d1725be33d4bc0f195780e7fd4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
31ba85d1725be33d4bc0f195780e7fd4_JaffaCakes118
-
Size
37KB
-
MD5
31ba85d1725be33d4bc0f195780e7fd4
-
SHA1
4019f250e03fd110982c87db3e254df5603c849f
-
SHA256
24d798837b7b27dfdd3732e4ba091404b204442fccefc00bc96e61264d00baae
-
SHA512
ff56bfc8a38290d016e0392654165516e02a20ac234f7484fc20b6d50b8f510b1258dcf9d9a33df8c8121a10fee09198d925031e21318334562a8c8e5c751974
-
SSDEEP
768:ejCyzmmRmDyt1+h3TPjDsDIZ6HQrsNMp5/WFn1iFJzuD6rwA:WzmmRmDy3s3TPj+IKQDp5eFn1iF26rV
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-