Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b8b43f92fde839577aa814e8792fd789_JaffaCakes118
-
Size
566KB
-
Sample
240822-xav83svarp
-
MD5
b8b43f92fde839577aa814e8792fd789
-
SHA1
2f873c7c898fb726b9811549d63b421c7d0f2db4
-
SHA256
5e277d7dedc6e221e8c4924387da720d7c4a882d34d7e782e725603ad3c46251
-
SHA512
62f6de47caf69290aec6f67aacbe8477f38d6c5afc4a60ae344ed4caf6e616db75886c917eae66d85d6e13c4cc40eb87e2ae424e28be42049c2e0abcca6af1ea
-
SSDEEP
12288:U9fjyuSkwPr6PzD1qzEszAjFBK57kokrOU+p9Jh/0k0+CfNHvXurUd:0jyuUPePP1q1Ahi72xtfVd
Static task
static1
Behavioral task
behavioral1
Sample
b8b43f92fde839577aa814e8792fd789_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b8b43f92fde839577aa814e8792fd789_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b8b43f92fde839577aa814e8792fd789_JaffaCakes118
-
Size
566KB
-
MD5
b8b43f92fde839577aa814e8792fd789
-
SHA1
2f873c7c898fb726b9811549d63b421c7d0f2db4
-
SHA256
5e277d7dedc6e221e8c4924387da720d7c4a882d34d7e782e725603ad3c46251
-
SHA512
62f6de47caf69290aec6f67aacbe8477f38d6c5afc4a60ae344ed4caf6e616db75886c917eae66d85d6e13c4cc40eb87e2ae424e28be42049c2e0abcca6af1ea
-
SSDEEP
12288:U9fjyuSkwPr6PzD1qzEszAjFBK57kokrOU+p9Jh/0k0+CfNHvXurUd:0jyuUPePP1q1Ahi72xtfVd
Score10/10-
Ardamax main executable
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-