Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a5678f3a7ee0903dc9d4fcb52821ef04_JaffaCakes118
-
Size
5.6MB
-
Sample
240818-e7jbnsycrl
-
MD5
a5678f3a7ee0903dc9d4fcb52821ef04
-
SHA1
b1819407654eb379f1681c2037f9d70b1e93eb77
-
SHA256
ffc0a242e73653e7b487be3f970538cc05bab897ebc53488aa7243a92938e9e5
-
SHA512
db268a743e520cc9c7aebc46f0105c821133dd1e69670d9501b24f76d3d512cd23c67584eb8bc4d64bf0a4c267e019e44606cca12c96ce90359ef47f2ebfeb39
-
SSDEEP
49152:H5udYaK8MJC9e8FXvMon4eFXH2H+o/Hw9wtaddtJAqsJnDpFDBUq6SRLGTnA:YdYaK8+C9
Static task
static1
Behavioral task
behavioral1
Sample
a5678f3a7ee0903dc9d4fcb52821ef04_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5678f3a7ee0903dc9d4fcb52821ef04_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
a5678f3a7ee0903dc9d4fcb52821ef04_JaffaCakes118
-
Size
5.6MB
-
MD5
a5678f3a7ee0903dc9d4fcb52821ef04
-
SHA1
b1819407654eb379f1681c2037f9d70b1e93eb77
-
SHA256
ffc0a242e73653e7b487be3f970538cc05bab897ebc53488aa7243a92938e9e5
-
SHA512
db268a743e520cc9c7aebc46f0105c821133dd1e69670d9501b24f76d3d512cd23c67584eb8bc4d64bf0a4c267e019e44606cca12c96ce90359ef47f2ebfeb39
-
SSDEEP
49152:H5udYaK8MJC9e8FXvMon4eFXH2H+o/Hw9wtaddtJAqsJnDpFDBUq6SRLGTnA:YdYaK8+C9
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-