Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b381461c2e2c87feec1141428dfdbae5_JaffaCakes118
-
Size
332KB
-
Sample
240821-pzr9qasdqm
-
MD5
b381461c2e2c87feec1141428dfdbae5
-
SHA1
3142fad60b3237cd5ff5fa51c8e645394768e771
-
SHA256
0c4b95d1301ae9f5be0add1cce7c92cf7041f7c6a7531222e922668714c09ee7
-
SHA512
907b8efb4b6b31e90646fd1baea48a7b4d0b571c88555ccabe61794935b0e7cb33164d43ead5379ef2164cb1a540cd60f8cd644eefe5307e229c783b9db958d3
-
SSDEEP
6144:o3KEwUBFlfvryauVcy+jJfCG6S36YcRsQV6y8n:ttUdua2236dKQVm
Static task
static1
Behavioral task
behavioral1
Sample
b381461c2e2c87feec1141428dfdbae5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b381461c2e2c87feec1141428dfdbae5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b381461c2e2c87feec1141428dfdbae5_JaffaCakes118
-
Size
332KB
-
MD5
b381461c2e2c87feec1141428dfdbae5
-
SHA1
3142fad60b3237cd5ff5fa51c8e645394768e771
-
SHA256
0c4b95d1301ae9f5be0add1cce7c92cf7041f7c6a7531222e922668714c09ee7
-
SHA512
907b8efb4b6b31e90646fd1baea48a7b4d0b571c88555ccabe61794935b0e7cb33164d43ead5379ef2164cb1a540cd60f8cd644eefe5307e229c783b9db958d3
-
SSDEEP
6144:o3KEwUBFlfvryauVcy+jJfCG6S36YcRsQV6y8n:ttUdua2236dKQVm
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-