Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8e9c0c7d17175e250dab9c1a3f566dd8_JaffaCakes118
-
Size
2.5MB
-
Sample
240812-nvr8gszblj
-
MD5
8e9c0c7d17175e250dab9c1a3f566dd8
-
SHA1
8dfd1e21610cd6467c25fa843a9d15915814e3b8
-
SHA256
7d42eed431b0f1107f1fa82151916047c5e4bb37a07bf51ab75167943b498f2b
-
SHA512
32fecd76d5d82d56341ffc15a9e2e81e6b341c44f0410cd4a27687819027c8d966660e4c753b5713d406e7f4fea81211ee75cbcb5888de12391196ba0a909b06
-
SSDEEP
49152:ocy796EvMtTx435MtV+rnUgKLWgAOXDHpSeZtk6EBI1rT:47AEvgVOXUgKLWgAWHXyHY
Static task
static1
Behavioral task
behavioral1
Sample
8e9c0c7d17175e250dab9c1a3f566dd8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8e9c0c7d17175e250dab9c1a3f566dd8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
8e9c0c7d17175e250dab9c1a3f566dd8_JaffaCakes118
-
Size
2.5MB
-
MD5
8e9c0c7d17175e250dab9c1a3f566dd8
-
SHA1
8dfd1e21610cd6467c25fa843a9d15915814e3b8
-
SHA256
7d42eed431b0f1107f1fa82151916047c5e4bb37a07bf51ab75167943b498f2b
-
SHA512
32fecd76d5d82d56341ffc15a9e2e81e6b341c44f0410cd4a27687819027c8d966660e4c753b5713d406e7f4fea81211ee75cbcb5888de12391196ba0a909b06
-
SSDEEP
49152:ocy796EvMtTx435MtV+rnUgKLWgAOXDHpSeZtk6EBI1rT:47AEvgVOXUgKLWgAWHXyHY
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-