Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3609dd9bead078abedec9032528489b5_JaffaCakes118
-
Size
252KB
-
Sample
240710-xyq92axfrg
-
MD5
3609dd9bead078abedec9032528489b5
-
SHA1
212ff9df8b4152de1a0f1926712c01fd37891a11
-
SHA256
d21c97d91cfb8e7dc41f2bd1d3b8f06b0bdb27b8bb8cd9ac25a888e2e0cd95ff
-
SHA512
16f0a17a9b46df2f364780446b999eb6ac3e79bf0740a2d9f429d06a45d524a0ff5ed56e2314bd0743c4b760ddd7f46837277fb7b0f123985cff850a00df0cd4
-
SSDEEP
3072:hl0qlgYg9bVtgfzFHfzb51QRPr8GDilkk:hlHg59joFJyr8GuS
Static task
static1
Behavioral task
behavioral1
Sample
3609dd9bead078abedec9032528489b5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3609dd9bead078abedec9032528489b5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
3609dd9bead078abedec9032528489b5_JaffaCakes118
-
Size
252KB
-
MD5
3609dd9bead078abedec9032528489b5
-
SHA1
212ff9df8b4152de1a0f1926712c01fd37891a11
-
SHA256
d21c97d91cfb8e7dc41f2bd1d3b8f06b0bdb27b8bb8cd9ac25a888e2e0cd95ff
-
SHA512
16f0a17a9b46df2f364780446b999eb6ac3e79bf0740a2d9f429d06a45d524a0ff5ed56e2314bd0743c4b760ddd7f46837277fb7b0f123985cff850a00df0cd4
-
SSDEEP
3072:hl0qlgYg9bVtgfzFHfzb51QRPr8GDilkk:hlHg59joFJyr8GuS
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-