Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8444369e0b1bb3745748fc291a36cd56_JaffaCakes118
-
Size
988KB
-
Sample
240810-bldbrayeln
-
MD5
8444369e0b1bb3745748fc291a36cd56
-
SHA1
cd20e28e634f848c38a0fe3d78aa519171189675
-
SHA256
147d93096d541cfd1f5ba922c7eb3f114365874bfb6aaa3f886ff51061bcb179
-
SHA512
3f1bb1764b419dab82c20c3fa04b64f6bcb40d69691445c2750a35de7e9ae53818fa8f95f0ec6a71f4af98d23975eab51240eab9787dc5c96f368a1c0d615a17
-
SSDEEP
12288:X36cLlFLuQh9IHEOqeRkgYuIQQoNAHYZ/GEuGjPqR6S+Q7E94hkoBDP8:6cZFLfbLPeu3+QoKCPLqRhndhdDP8
Static task
static1
Behavioral task
behavioral1
Sample
8444369e0b1bb3745748fc291a36cd56_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8444369e0b1bb3745748fc291a36cd56_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
8444369e0b1bb3745748fc291a36cd56_JaffaCakes118
-
Size
988KB
-
MD5
8444369e0b1bb3745748fc291a36cd56
-
SHA1
cd20e28e634f848c38a0fe3d78aa519171189675
-
SHA256
147d93096d541cfd1f5ba922c7eb3f114365874bfb6aaa3f886ff51061bcb179
-
SHA512
3f1bb1764b419dab82c20c3fa04b64f6bcb40d69691445c2750a35de7e9ae53818fa8f95f0ec6a71f4af98d23975eab51240eab9787dc5c96f368a1c0d615a17
-
SSDEEP
12288:X36cLlFLuQh9IHEOqeRkgYuIQQoNAHYZ/GEuGjPqR6S+Q7E94hkoBDP8:6cZFLfbLPeu3+QoKCPLqRhndhdDP8
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-