Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bf3278465406b491b1e311f2dfe6a44e_JaffaCakes118
-
Size
138KB
-
Sample
240824-xfla3atdpb
-
MD5
bf3278465406b491b1e311f2dfe6a44e
-
SHA1
5b0a11e0e6b0df23e64ffb6bc80c8d71b14021e5
-
SHA256
5a757a91732dbe9c76b92d7b86501897b14d6aa92074d05ae7d0fd822d3349e9
-
SHA512
44a8e97ea6fb799a5a19b5bc89c3bbf6bdb7dbb684a126f96cb5f6734b0fa7d803be39eeeb2038b72fdbe0a6ac027dfc148b9226775bf12c86240cde867f5652
-
SSDEEP
3072:GSaP0Z050tfQQMvmkBN3WvRrMogdE/7/pPwyP:GSaPC050tfQwkv3wwouE9P
Static task
static1
Behavioral task
behavioral1
Sample
bf3278465406b491b1e311f2dfe6a44e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bf3278465406b491b1e311f2dfe6a44e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
bf3278465406b491b1e311f2dfe6a44e_JaffaCakes118
-
Size
138KB
-
MD5
bf3278465406b491b1e311f2dfe6a44e
-
SHA1
5b0a11e0e6b0df23e64ffb6bc80c8d71b14021e5
-
SHA256
5a757a91732dbe9c76b92d7b86501897b14d6aa92074d05ae7d0fd822d3349e9
-
SHA512
44a8e97ea6fb799a5a19b5bc89c3bbf6bdb7dbb684a126f96cb5f6734b0fa7d803be39eeeb2038b72fdbe0a6ac027dfc148b9226775bf12c86240cde867f5652
-
SSDEEP
3072:GSaP0Z050tfQQMvmkBN3WvRrMogdE/7/pPwyP:GSaPC050tfQwkv3wwouE9P
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-