Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b6d89ee7e4aaf6ec1c96d4104d25aa2e_JaffaCakes118
-
Size
153KB
-
Sample
240822-jfamnsvgka
-
MD5
b6d89ee7e4aaf6ec1c96d4104d25aa2e
-
SHA1
ad85f746d1e1578e5ead1d70ca85ec610a900399
-
SHA256
d52e2441a414e39e891ac7ff0c82a9d124467966893c0082426f1f040268b293
-
SHA512
4dd7100e5b0e774706aa6e762978f6da35cfd042fef70b4a273a282db02de73735cdb0133b933d226258fa982f04a545fc5504c5466d75d7e0ed48bda52d7389
-
SSDEEP
3072:BKDAfCDSmJOQ2hnCanbVqA2wIEtd81cw5vE73cQ+pjU:BR5nCobMUIEr8Z5e3cZjU
Static task
static1
Behavioral task
behavioral1
Sample
b6d89ee7e4aaf6ec1c96d4104d25aa2e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b6d89ee7e4aaf6ec1c96d4104d25aa2e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b6d89ee7e4aaf6ec1c96d4104d25aa2e_JaffaCakes118
-
Size
153KB
-
MD5
b6d89ee7e4aaf6ec1c96d4104d25aa2e
-
SHA1
ad85f746d1e1578e5ead1d70ca85ec610a900399
-
SHA256
d52e2441a414e39e891ac7ff0c82a9d124467966893c0082426f1f040268b293
-
SHA512
4dd7100e5b0e774706aa6e762978f6da35cfd042fef70b4a273a282db02de73735cdb0133b933d226258fa982f04a545fc5504c5466d75d7e0ed48bda52d7389
-
SSDEEP
3072:BKDAfCDSmJOQ2hnCanbVqA2wIEtd81cw5vE73cQ+pjU:BR5nCobMUIEr8Z5e3cZjU
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-