Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
37d967d2499d538f6fe5f9980a4b2242_JaffaCakes118
-
Size
494KB
-
Sample
240711-f14vga1cmp
-
MD5
37d967d2499d538f6fe5f9980a4b2242
-
SHA1
c0672450b4888eb05b4a058a5397e97d74f59433
-
SHA256
f2e6283084529baeedd48ee8a6f419c738867d897c0cc8ae1f6e8f33a288314c
-
SHA512
ecbb74474ca39a254de49f3bae6214bc64688bc662d85475614fbed16e555dfca940ee2ecd1478207054312dab7140f6b4dc0add9015efbb107a683477599664
-
SSDEEP
12288:340IN8sAahDijGgkTj9IfMM9cwymfByHvNRrEr0mV:340M1RjCRcxrs0mV
Static task
static1
Behavioral task
behavioral1
Sample
37d967d2499d538f6fe5f9980a4b2242_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37d967d2499d538f6fe5f9980a4b2242_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
37d967d2499d538f6fe5f9980a4b2242_JaffaCakes118
-
Size
494KB
-
MD5
37d967d2499d538f6fe5f9980a4b2242
-
SHA1
c0672450b4888eb05b4a058a5397e97d74f59433
-
SHA256
f2e6283084529baeedd48ee8a6f419c738867d897c0cc8ae1f6e8f33a288314c
-
SHA512
ecbb74474ca39a254de49f3bae6214bc64688bc662d85475614fbed16e555dfca940ee2ecd1478207054312dab7140f6b4dc0add9015efbb107a683477599664
-
SSDEEP
12288:340IN8sAahDijGgkTj9IfMM9cwymfByHvNRrEr0mV:340M1RjCRcxrs0mV
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-