Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4af3eb17b08c45ea5b377cfc7432b1df_JaffaCakes118
-
Size
128KB
-
Sample
240715-xgw4ysxara
-
MD5
4af3eb17b08c45ea5b377cfc7432b1df
-
SHA1
761042688c6892117f64669346990b5c88d04fb8
-
SHA256
031ce207a9348ca92047b2ff3cde60d6c608e02491d14dbecbe29c51c6b532b5
-
SHA512
8c1e0c7445e63853d2ff735127a04e445bcb6b8da51903b9285f3ee3659806887fc0ab589ed2d89535d4e42b8cb52d1f3292497f36bf641df602aacb84a72b38
-
SSDEEP
3072:xxwbcHVICc7soi3rK+/7uqelMYa3S1H2N:nwbAVFc7st3rK+/7uqelMYa3S1HS
Static task
static1
Behavioral task
behavioral1
Sample
4af3eb17b08c45ea5b377cfc7432b1df_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4af3eb17b08c45ea5b377cfc7432b1df_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
4af3eb17b08c45ea5b377cfc7432b1df_JaffaCakes118
-
Size
128KB
-
MD5
4af3eb17b08c45ea5b377cfc7432b1df
-
SHA1
761042688c6892117f64669346990b5c88d04fb8
-
SHA256
031ce207a9348ca92047b2ff3cde60d6c608e02491d14dbecbe29c51c6b532b5
-
SHA512
8c1e0c7445e63853d2ff735127a04e445bcb6b8da51903b9285f3ee3659806887fc0ab589ed2d89535d4e42b8cb52d1f3292497f36bf641df602aacb84a72b38
-
SSDEEP
3072:xxwbcHVICc7soi3rK+/7uqelMYa3S1H2N:nwbAVFc7st3rK+/7uqelMYa3S1HS
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-