Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
859c3f171bcb3ed7d10007ec71f98082_JaffaCakes118
-
Size
109KB
-
Sample
240810-lmxf5athmr
-
MD5
859c3f171bcb3ed7d10007ec71f98082
-
SHA1
b02a91d37762e485e02284ad13040522ea41471c
-
SHA256
295f9b09881e8d978bc84aaebb18daa0a79f047d013921e9119d361fe4b5443d
-
SHA512
9bff308eb1ad3e01d4d95bda21f8018398ccafd9d6f6c1d9b209f77a0598f84b2245870184dac8a2278c34f97af38c9d8e36506ae552b29baecc6a84a7e34391
-
SSDEEP
3072:08jQ/bYnmYQus2HoUqrdT1x/QaiAjnLq845OKzNm:0IQ/b4nqbdB9Xnt45VRm
Static task
static1
Behavioral task
behavioral1
Sample
859c3f171bcb3ed7d10007ec71f98082_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
859c3f171bcb3ed7d10007ec71f98082_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
859c3f171bcb3ed7d10007ec71f98082_JaffaCakes118
-
Size
109KB
-
MD5
859c3f171bcb3ed7d10007ec71f98082
-
SHA1
b02a91d37762e485e02284ad13040522ea41471c
-
SHA256
295f9b09881e8d978bc84aaebb18daa0a79f047d013921e9119d361fe4b5443d
-
SHA512
9bff308eb1ad3e01d4d95bda21f8018398ccafd9d6f6c1d9b209f77a0598f84b2245870184dac8a2278c34f97af38c9d8e36506ae552b29baecc6a84a7e34391
-
SSDEEP
3072:08jQ/bYnmYQus2HoUqrdT1x/QaiAjnLq845OKzNm:0IQ/b4nqbdB9Xnt45VRm
Score8/10-
Adds policy Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-