Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
35a9e3691a121e9d02a7465d3f57e697_JaffaCakes118
-
Size
276KB
-
Sample
240710-vwzsaazdpl
-
MD5
35a9e3691a121e9d02a7465d3f57e697
-
SHA1
1ecf5a5e401938938c1c48d94299be0b4da3346b
-
SHA256
0bc8301f92ca6ff61ac8ff88b53e0ec12b9ac4ee2c94811cd433d19cd8e2833b
-
SHA512
812056603e7394746d8096623b487ecd168633d6a5567cdef947b3b80dbf5bc4f44aaa7a79563febe73aad4cc494997885c64223a6daad1eb5c275657b2ed749
-
SSDEEP
6144:tgJDJJPCDMzJu749QepWyBLTURx44IhR0:tlwzJuZeseLTUR6m
Static task
static1
Behavioral task
behavioral1
Sample
35a9e3691a121e9d02a7465d3f57e697_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35a9e3691a121e9d02a7465d3f57e697_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
35a9e3691a121e9d02a7465d3f57e697_JaffaCakes118
-
Size
276KB
-
MD5
35a9e3691a121e9d02a7465d3f57e697
-
SHA1
1ecf5a5e401938938c1c48d94299be0b4da3346b
-
SHA256
0bc8301f92ca6ff61ac8ff88b53e0ec12b9ac4ee2c94811cd433d19cd8e2833b
-
SHA512
812056603e7394746d8096623b487ecd168633d6a5567cdef947b3b80dbf5bc4f44aaa7a79563febe73aad4cc494997885c64223a6daad1eb5c275657b2ed749
-
SSDEEP
6144:tgJDJJPCDMzJu749QepWyBLTURx44IhR0:tlwzJuZeseLTUR6m
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-