Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ac35e362a8f2d426515056b8e7d0b91b_JaffaCakes118
-
Size
1.4MB
-
Sample
240819-xsskxavcrl
-
MD5
ac35e362a8f2d426515056b8e7d0b91b
-
SHA1
436d37800e2580ae19370fba58c176f039a7f8a8
-
SHA256
185f6e209635d969183fe521f76efd33dc622563d99b73f46fa5f9513662d838
-
SHA512
37c997ec1d36572851cba99497e88310d2874d12f964ac30873c9ba643d918d8ad49b2815602806f179bcca9a17c7de6f75379af6c4dc9589883ec470c57ada2
-
SSDEEP
24576:P/ss/4p6qO4pDlPJsZtZQk5p8hulbEwfDpBzjRvdsxlTShiV7:5/4Qf4pxPctqG8IllnxvdsxZ4U7
Static task
static1
Behavioral task
behavioral1
Sample
ac35e362a8f2d426515056b8e7d0b91b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac35e362a8f2d426515056b8e7d0b91b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ac35e362a8f2d426515056b8e7d0b91b_JaffaCakes118
-
Size
1.4MB
-
MD5
ac35e362a8f2d426515056b8e7d0b91b
-
SHA1
436d37800e2580ae19370fba58c176f039a7f8a8
-
SHA256
185f6e209635d969183fe521f76efd33dc622563d99b73f46fa5f9513662d838
-
SHA512
37c997ec1d36572851cba99497e88310d2874d12f964ac30873c9ba643d918d8ad49b2815602806f179bcca9a17c7de6f75379af6c4dc9589883ec470c57ada2
-
SSDEEP
24576:P/ss/4p6qO4pDlPJsZtZQk5p8hulbEwfDpBzjRvdsxlTShiV7:5/4Qf4pxPctqG8IllnxvdsxZ4U7
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-