Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
73d45993a6f279e3d13f2e06a5f90437_JaffaCakes118
-
Size
142KB
-
Sample
240726-nest3svbkm
-
MD5
73d45993a6f279e3d13f2e06a5f90437
-
SHA1
dbc1bfccb5f56e9acaf94d917a180bda53a6985a
-
SHA256
7001535b5f2b0b850bc9ffca376a9ed69b52e98afa052dfe730d26efcdd6f1ec
-
SHA512
4e7c05f178c430e6d38d8b32d5d40896d7eb3bd9cb463c23a2fba68e4688a290b599c2fde5778ceffdc951062dfaa5bad3e510fad20bbd992a5839d4faf2b37e
-
SSDEEP
3072:nix5XnHSNwVR6vW6nNQAUrTrogAaU/eTQyBnykmNsNl0WiuxzO/w5ukxM:niTXuKUn2X5A2tyfDWdpM
Static task
static1
Behavioral task
behavioral1
Sample
73d45993a6f279e3d13f2e06a5f90437_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
73d45993a6f279e3d13f2e06a5f90437_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
73d45993a6f279e3d13f2e06a5f90437_JaffaCakes118
-
Size
142KB
-
MD5
73d45993a6f279e3d13f2e06a5f90437
-
SHA1
dbc1bfccb5f56e9acaf94d917a180bda53a6985a
-
SHA256
7001535b5f2b0b850bc9ffca376a9ed69b52e98afa052dfe730d26efcdd6f1ec
-
SHA512
4e7c05f178c430e6d38d8b32d5d40896d7eb3bd9cb463c23a2fba68e4688a290b599c2fde5778ceffdc951062dfaa5bad3e510fad20bbd992a5839d4faf2b37e
-
SSDEEP
3072:nix5XnHSNwVR6vW6nNQAUrTrogAaU/eTQyBnykmNsNl0WiuxzO/w5ukxM:niTXuKUn2X5A2tyfDWdpM
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-