Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c1e8bab3c5ed255d7ff964f32f7e1f74_JaffaCakes118
-
Size
2.7MB
-
Sample
240826-ar6d2swckq
-
MD5
c1e8bab3c5ed255d7ff964f32f7e1f74
-
SHA1
bbfbf1437eec181473b8328eb24368ced4b34bdd
-
SHA256
e7c7458e55faf52c86b67eba26d006733898e9f28fd69eff7cf85218fb9c5ca2
-
SHA512
5e079f67e3da9cb59926f821e52ead42c57192fe4ee7cf7f8406ff5a2150e89bf04f3bc844b582a42ddb90eb713296a8a6a6f1aa9d0a2694bacd197b61f1bbc8
-
SSDEEP
49152:AwfxsUM6BmxTHqz2E4j8rGKPaMTBZTzcjjzXRrP+9EYemB90t:AwA6sxTHqnz6KPaMjejT8aiW
Static task
static1
Behavioral task
behavioral1
Sample
c1e8bab3c5ed255d7ff964f32f7e1f74_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c1e8bab3c5ed255d7ff964f32f7e1f74_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
c1e8bab3c5ed255d7ff964f32f7e1f74_JaffaCakes118
-
Size
2.7MB
-
MD5
c1e8bab3c5ed255d7ff964f32f7e1f74
-
SHA1
bbfbf1437eec181473b8328eb24368ced4b34bdd
-
SHA256
e7c7458e55faf52c86b67eba26d006733898e9f28fd69eff7cf85218fb9c5ca2
-
SHA512
5e079f67e3da9cb59926f821e52ead42c57192fe4ee7cf7f8406ff5a2150e89bf04f3bc844b582a42ddb90eb713296a8a6a6f1aa9d0a2694bacd197b61f1bbc8
-
SSDEEP
49152:AwfxsUM6BmxTHqz2E4j8rGKPaMTBZTzcjjzXRrP+9EYemB90t:AwA6sxTHqnz6KPaMjejT8aiW
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-