Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
af721407cd30e419933df7f2ddb818ce_JaffaCakes118
-
Size
1.2MB
-
Sample
240820-qydklsvcmb
-
MD5
af721407cd30e419933df7f2ddb818ce
-
SHA1
eaeb86da088eba909e15ff9708589600a2fa6ecb
-
SHA256
fed1e56b5d27619c445d6e4d5834ff1c6a6f82403fb238c891b3fcaae5aab53c
-
SHA512
a7ba7ff32ec6216d3a3c14c8335a219c8a627bcc9bfb1e173d5c293e3597c3bead37d54bb33457e709568fe25de01e5c9d34fc0519235a40766ec719cfe3378e
-
SSDEEP
24576:bZxTt/zLjG7dMbJ3Rs4zjXvqYMDpQ5IPqFJLeKZNiA89ZpP56vHcwpdljpU:bXTtDGibPs4X/sFQCP4SgMV9Zp/Qdl
Static task
static1
Behavioral task
behavioral1
Sample
af721407cd30e419933df7f2ddb818ce_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af721407cd30e419933df7f2ddb818ce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
af721407cd30e419933df7f2ddb818ce_JaffaCakes118
-
Size
1.2MB
-
MD5
af721407cd30e419933df7f2ddb818ce
-
SHA1
eaeb86da088eba909e15ff9708589600a2fa6ecb
-
SHA256
fed1e56b5d27619c445d6e4d5834ff1c6a6f82403fb238c891b3fcaae5aab53c
-
SHA512
a7ba7ff32ec6216d3a3c14c8335a219c8a627bcc9bfb1e173d5c293e3597c3bead37d54bb33457e709568fe25de01e5c9d34fc0519235a40766ec719cfe3378e
-
SSDEEP
24576:bZxTt/zLjG7dMbJ3Rs4zjXvqYMDpQ5IPqFJLeKZNiA89ZpP56vHcwpdljpU:bXTtDGibPs4X/sFQCP4SgMV9Zp/Qdl
Score10/10-
Ardamax main executable
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-