Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
771b8e6d5c61711d62f8ea4d693a76d0_JaffaCakes118
-
Size
1.2MB
-
Sample
240727-ffk7ma1fmf
-
MD5
771b8e6d5c61711d62f8ea4d693a76d0
-
SHA1
b0fcd7815426fdefab32e8fb9a9597b563e3c1f5
-
SHA256
1c95226e592be7f097f657f71e659a55638bfc61cc77a5fc76dd4c55b050b7eb
-
SHA512
2cfd146e23cf80a3d9973a3d01f44b53e8c0bcb9473fee694103443e468e0556156a723c522202cfef279f5199b9f3276b55b75f228f5120b2172abff60da775
-
SSDEEP
12288:4r8uWVM9sCmev9C3BoADl+lbuk492hx5L4v9pynd/BYBJ3Zi:48uWmsRHxvDlZ9v9Ti
Static task
static1
Behavioral task
behavioral1
Sample
771b8e6d5c61711d62f8ea4d693a76d0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
771b8e6d5c61711d62f8ea4d693a76d0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
771b8e6d5c61711d62f8ea4d693a76d0_JaffaCakes118
-
Size
1.2MB
-
MD5
771b8e6d5c61711d62f8ea4d693a76d0
-
SHA1
b0fcd7815426fdefab32e8fb9a9597b563e3c1f5
-
SHA256
1c95226e592be7f097f657f71e659a55638bfc61cc77a5fc76dd4c55b050b7eb
-
SHA512
2cfd146e23cf80a3d9973a3d01f44b53e8c0bcb9473fee694103443e468e0556156a723c522202cfef279f5199b9f3276b55b75f228f5120b2172abff60da775
-
SSDEEP
12288:4r8uWVM9sCmev9C3BoADl+lbuk492hx5L4v9pynd/BYBJ3Zi:48uWmsRHxvDlZ9v9Ti
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-