Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3ba949a0ea07a21574c8c19aa2a98185_JaffaCakes118
-
Size
2.1MB
-
Sample
240712-cw679avdll
-
MD5
3ba949a0ea07a21574c8c19aa2a98185
-
SHA1
6858d3b67e2ebb5b0054adc10ec26716a6561eee
-
SHA256
8c5c52172fa3fa71809a12be5ecce077b8683741db6e45cfa21274e31a934255
-
SHA512
c53fb962d10e237f6c06399141396b0b136c01a639ef6b39d1569b5eab0207eda1e4be07ea82672bd3bc76a94e402cbe15d096b37e3d9f131703199f7d5e10eb
-
SSDEEP
49152:C0R7+Ac0qQEtZkCkg303WlcIxnZg01o32:C0C0qxtZkCk00mpxZgUo32
Static task
static1
Behavioral task
behavioral1
Sample
3ba949a0ea07a21574c8c19aa2a98185_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ba949a0ea07a21574c8c19aa2a98185_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
3ba949a0ea07a21574c8c19aa2a98185_JaffaCakes118
-
Size
2.1MB
-
MD5
3ba949a0ea07a21574c8c19aa2a98185
-
SHA1
6858d3b67e2ebb5b0054adc10ec26716a6561eee
-
SHA256
8c5c52172fa3fa71809a12be5ecce077b8683741db6e45cfa21274e31a934255
-
SHA512
c53fb962d10e237f6c06399141396b0b136c01a639ef6b39d1569b5eab0207eda1e4be07ea82672bd3bc76a94e402cbe15d096b37e3d9f131703199f7d5e10eb
-
SSDEEP
49152:C0R7+Ac0qQEtZkCkg303WlcIxnZg01o32:C0C0qxtZkCk00mpxZgUo32
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-