Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5ec947de80e1f54ce7f0e36e97185710_JaffaCakes118
-
Size
2.4MB
-
Sample
240720-djs1jatcqr
-
MD5
5ec947de80e1f54ce7f0e36e97185710
-
SHA1
489b3a403e552e91d5a19b90db79e2a0dbc5c2b3
-
SHA256
4d0bed8556e3bb72d1d58eabb0d913635e0dd834df9e39d5d76e211da717e3ec
-
SHA512
58ad6b550261a0aff30a3ce3c8f30d5c14843d7c278e1dae58fdccd23b33f0ab49972763580ee7f064d704a8034c009adaa42d99e06ce0ade7b14c995697ba79
-
SSDEEP
49152:BRQ4vLFY5AZCgDR89fMByapkN4gLTsnBzodIPaQN0RsnQs96mTCd8dNDS0b:02Y5AZpbkW2T+uIiG0gN9bCd+x5
Static task
static1
Behavioral task
behavioral1
Sample
5ec947de80e1f54ce7f0e36e97185710_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ec947de80e1f54ce7f0e36e97185710_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
5ec947de80e1f54ce7f0e36e97185710_JaffaCakes118
-
Size
2.4MB
-
MD5
5ec947de80e1f54ce7f0e36e97185710
-
SHA1
489b3a403e552e91d5a19b90db79e2a0dbc5c2b3
-
SHA256
4d0bed8556e3bb72d1d58eabb0d913635e0dd834df9e39d5d76e211da717e3ec
-
SHA512
58ad6b550261a0aff30a3ce3c8f30d5c14843d7c278e1dae58fdccd23b33f0ab49972763580ee7f064d704a8034c009adaa42d99e06ce0ade7b14c995697ba79
-
SSDEEP
49152:BRQ4vLFY5AZCgDR89fMByapkN4gLTsnBzodIPaQN0RsnQs96mTCd8dNDS0b:02Y5AZpbkW2T+uIiG0gN9bCd+x5
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-