Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
afa862db683b6b7198665bf204d171e8_JaffaCakes118
-
Size
40KB
-
Sample
240820-r7ysksxhjc
-
MD5
afa862db683b6b7198665bf204d171e8
-
SHA1
36cc5bca1da3be744c0a5fc765e76257dbdffdec
-
SHA256
f91b63543a21e56c1143b69c34844e52bbae0bb34d535acbff2ebad5e3cac43e
-
SHA512
a3ba3de94232bcf15bb044b38bb90b4c423a9e57518bbe5901677962dd67660c1e743173cdf340d6c4f6b340ae9db3222ef65c06d9580856d1e921d2af0f5dc4
-
SSDEEP
768:6sltaNBlzZwDM/iScPFIJfstmbrzRyzBwbVRHkKk5PwIWC9gUSWD:7lteJwDM/iSbtumbrFyzBwbVREPljvSa
Static task
static1
Behavioral task
behavioral1
Sample
afa862db683b6b7198665bf204d171e8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
afa862db683b6b7198665bf204d171e8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
afa862db683b6b7198665bf204d171e8_JaffaCakes118
-
Size
40KB
-
MD5
afa862db683b6b7198665bf204d171e8
-
SHA1
36cc5bca1da3be744c0a5fc765e76257dbdffdec
-
SHA256
f91b63543a21e56c1143b69c34844e52bbae0bb34d535acbff2ebad5e3cac43e
-
SHA512
a3ba3de94232bcf15bb044b38bb90b4c423a9e57518bbe5901677962dd67660c1e743173cdf340d6c4f6b340ae9db3222ef65c06d9580856d1e921d2af0f5dc4
-
SSDEEP
768:6sltaNBlzZwDM/iScPFIJfstmbrzRyzBwbVRHkKk5PwIWC9gUSWD:7lteJwDM/iSbtumbrFyzBwbVREPljvSa
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Drops file in System32 directory
-