Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b4e863360e1d14a175542e10f686a0b7_JaffaCakes118
-
Size
255KB
-
Sample
240821-y54dlssdqp
-
MD5
b4e863360e1d14a175542e10f686a0b7
-
SHA1
27264e7a52db255fc5b5b7d5907df57a6cf232e7
-
SHA256
de76066ca8f6a8d700e840ef5c4e3601756b6a39bd993ba5fa30ed86089a00de
-
SHA512
c9596e14af992ad1cd8639b89ad65f1bb269de48b01a52eedc406234dc6db99a3e327e6fdba8c948062bce6b044ebab78876de0908798a5e2628c6456dc7b2ef
-
SSDEEP
6144:scpvcHas+QdNy4qTCqjTM5JsBOxzhoj2LOxnBcsed2:fpvjsTd0jTMskxqCaGsY
Static task
static1
Behavioral task
behavioral1
Sample
b4e863360e1d14a175542e10f686a0b7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b4e863360e1d14a175542e10f686a0b7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b4e863360e1d14a175542e10f686a0b7_JaffaCakes118
-
Size
255KB
-
MD5
b4e863360e1d14a175542e10f686a0b7
-
SHA1
27264e7a52db255fc5b5b7d5907df57a6cf232e7
-
SHA256
de76066ca8f6a8d700e840ef5c4e3601756b6a39bd993ba5fa30ed86089a00de
-
SHA512
c9596e14af992ad1cd8639b89ad65f1bb269de48b01a52eedc406234dc6db99a3e327e6fdba8c948062bce6b044ebab78876de0908798a5e2628c6456dc7b2ef
-
SSDEEP
6144:scpvcHas+QdNy4qTCqjTM5JsBOxzhoj2LOxnBcsed2:fpvjsTd0jTMskxqCaGsY
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-