Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
387389a4940f58dcc549ed7ae25f93d7_JaffaCakes118
-
Size
132KB
-
Sample
240711-kq4tyayfmj
-
MD5
387389a4940f58dcc549ed7ae25f93d7
-
SHA1
97a79bf39e41bbbbd8197504b26791d675bad5f3
-
SHA256
8d8c416ebaf747304e3a40a38d1fc7a1b9d53e7b746a2c4dd8ad18f807abebaa
-
SHA512
1b0fa264a03f10491e7d0b96030702862331821cf6eb96b6ce396cd06bd774824e6e3fd0a486b54afa2dc5c5ef09ef694fe2c35a153dc5790a937ef764a725e3
-
SSDEEP
1536:cqm4e/T8H6rM2qEbBkIvI4DyQDIws/HmmYbRdfuL0wo7JaS1:te/T8H63qEbBkn4e2s/HmlTfdwQL
Static task
static1
Behavioral task
behavioral1
Sample
387389a4940f58dcc549ed7ae25f93d7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
387389a4940f58dcc549ed7ae25f93d7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
387389a4940f58dcc549ed7ae25f93d7_JaffaCakes118
-
Size
132KB
-
MD5
387389a4940f58dcc549ed7ae25f93d7
-
SHA1
97a79bf39e41bbbbd8197504b26791d675bad5f3
-
SHA256
8d8c416ebaf747304e3a40a38d1fc7a1b9d53e7b746a2c4dd8ad18f807abebaa
-
SHA512
1b0fa264a03f10491e7d0b96030702862331821cf6eb96b6ce396cd06bd774824e6e3fd0a486b54afa2dc5c5ef09ef694fe2c35a153dc5790a937ef764a725e3
-
SSDEEP
1536:cqm4e/T8H6rM2qEbBkIvI4DyQDIws/HmmYbRdfuL0wo7JaS1:te/T8H63qEbBkn4e2s/HmlTfdwQL
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-