Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6fb79ba3947c66a22fe871aa78ddee3d_JaffaCakes118
-
Size
36KB
-
Sample
240725-qf4dbazgqm
-
MD5
6fb79ba3947c66a22fe871aa78ddee3d
-
SHA1
67a1926f167f759084f9f2542f9eaaee42e1887c
-
SHA256
eee35028038d859e71c73315248c3d10a31595fcfc4262ac760565f562eb511f
-
SHA512
f2ea627578491705d4e07a52ffaf22d5ac918cc25a21c01172ca64277e1efcc2125a2f5ba98fb0cdf446944b2331c605a26ea436c4435b7fe2faaba6f27f529d
-
SSDEEP
384:cACr7s98J97l2SDWx6xP0J0M+HiYh1OjT6qdcaCQcEh0c3Ni5dYfjgf3j8Bzd5Qn:EnsGL7gSDWMRGYX1zrsnQi+ws
Static task
static1
Behavioral task
behavioral1
Sample
6fb79ba3947c66a22fe871aa78ddee3d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6fb79ba3947c66a22fe871aa78ddee3d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
6fb79ba3947c66a22fe871aa78ddee3d_JaffaCakes118
-
Size
36KB
-
MD5
6fb79ba3947c66a22fe871aa78ddee3d
-
SHA1
67a1926f167f759084f9f2542f9eaaee42e1887c
-
SHA256
eee35028038d859e71c73315248c3d10a31595fcfc4262ac760565f562eb511f
-
SHA512
f2ea627578491705d4e07a52ffaf22d5ac918cc25a21c01172ca64277e1efcc2125a2f5ba98fb0cdf446944b2331c605a26ea436c4435b7fe2faaba6f27f529d
-
SSDEEP
384:cACr7s98J97l2SDWx6xP0J0M+HiYh1OjT6qdcaCQcEh0c3Ni5dYfjgf3j8Bzd5Qn:EnsGL7gSDWMRGYX1zrsnQi+ws
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-