Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bcccec78cfc1a43e998fb318df2a3043_JaffaCakes118
-
Size
1.1MB
-
Sample
240823-xnhvxa1bng
-
MD5
bcccec78cfc1a43e998fb318df2a3043
-
SHA1
7b2f07507da3191b5b6feabe82b2feca3a38bb37
-
SHA256
870489ab9d127826e36919978c7fd80ca85dffd955562e6e38b095234445082f
-
SHA512
18ba5362ea0bc605f6fe4629619d0848afeb22eb7424ace28285e8ac3e0ede172571e923ca9e8f3bf103ef235b452f0ae6952500150fff502b4ae213d5eddf4f
-
SSDEEP
24576:iFszWS5ZfmLljbzQnDB+7BssNW5oIrqQFWrVMwNOiBxouj9D3:iW0lDKDB+7BsQKqyWrVMwXqU1
Static task
static1
Behavioral task
behavioral1
Sample
bcccec78cfc1a43e998fb318df2a3043_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bcccec78cfc1a43e998fb318df2a3043_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
bcccec78cfc1a43e998fb318df2a3043_JaffaCakes118
-
Size
1.1MB
-
MD5
bcccec78cfc1a43e998fb318df2a3043
-
SHA1
7b2f07507da3191b5b6feabe82b2feca3a38bb37
-
SHA256
870489ab9d127826e36919978c7fd80ca85dffd955562e6e38b095234445082f
-
SHA512
18ba5362ea0bc605f6fe4629619d0848afeb22eb7424ace28285e8ac3e0ede172571e923ca9e8f3bf103ef235b452f0ae6952500150fff502b4ae213d5eddf4f
-
SSDEEP
24576:iFszWS5ZfmLljbzQnDB+7BssNW5oIrqQFWrVMwNOiBxouj9D3:iW0lDKDB+7BsQKqyWrVMwXqU1
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-