Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7368608a333ad3f51c7521310b62cfab_JaffaCakes118
-
Size
123KB
-
Sample
240726-k2drwsybnm
-
MD5
7368608a333ad3f51c7521310b62cfab
-
SHA1
11bb7e2126928c79c82107810b60e0e0ba6f61c5
-
SHA256
a67e2dd170fbc8e797bf713d31bf9739f190bde40eff64114445c404f0b104c8
-
SHA512
e56d92f72b2e4df938dd93b2dc94947915513a7b4c063a19d0a2ad2fd19fd8a83c5b9803e17e1c987a0f4215ab01aed5d97037daf9773e4a2b507316a71ee0bd
-
SSDEEP
3072:ueSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLL2Rfd3:uVYrJrOSsRwcpY
Behavioral task
behavioral1
Sample
7368608a333ad3f51c7521310b62cfab_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
7368608a333ad3f51c7521310b62cfab_JaffaCakes118
-
Size
123KB
-
MD5
7368608a333ad3f51c7521310b62cfab
-
SHA1
11bb7e2126928c79c82107810b60e0e0ba6f61c5
-
SHA256
a67e2dd170fbc8e797bf713d31bf9739f190bde40eff64114445c404f0b104c8
-
SHA512
e56d92f72b2e4df938dd93b2dc94947915513a7b4c063a19d0a2ad2fd19fd8a83c5b9803e17e1c987a0f4215ab01aed5d97037daf9773e4a2b507316a71ee0bd
-
SSDEEP
3072:ueSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLL2Rfd3:uVYrJrOSsRwcpY
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-