Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d1de875b2da0f6bd0087b18b76ce6a20_JaffaCakes118
-
Size
156KB
-
Sample
240907-n1q8dashkj
-
MD5
d1de875b2da0f6bd0087b18b76ce6a20
-
SHA1
65474f71755e9d998d17f601d83a4984ccf51947
-
SHA256
29d16f7edc87bdf2813ad2ea4b9f2245eb3d9b0c707f6486b6b1969a8c8e991c
-
SHA512
e887ce19e09c1b335964f20b85aab1817a8dc14253e8e5402d6cfebe0432230446f609043ba05f394896ee13040ca65897145f042d8ee6aa2a70f23d02293631
-
SSDEEP
3072:qlyeIeQpQ1FVLO9VWIIT5a19rjOxiCsJiEnx1TlMYmvNOfug8EW9SZp8X/sEW9al:GQjiip4IlMYm1Ofun9SZp+kEvzNFG6aI
Static task
static1
Behavioral task
behavioral1
Sample
d1de875b2da0f6bd0087b18b76ce6a20_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1de875b2da0f6bd0087b18b76ce6a20_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d1de875b2da0f6bd0087b18b76ce6a20_JaffaCakes118
-
Size
156KB
-
MD5
d1de875b2da0f6bd0087b18b76ce6a20
-
SHA1
65474f71755e9d998d17f601d83a4984ccf51947
-
SHA256
29d16f7edc87bdf2813ad2ea4b9f2245eb3d9b0c707f6486b6b1969a8c8e991c
-
SHA512
e887ce19e09c1b335964f20b85aab1817a8dc14253e8e5402d6cfebe0432230446f609043ba05f394896ee13040ca65897145f042d8ee6aa2a70f23d02293631
-
SSDEEP
3072:qlyeIeQpQ1FVLO9VWIIT5a19rjOxiCsJiEnx1TlMYmvNOfug8EW9SZp8X/sEW9al:GQjiip4IlMYm1Ofun9SZp+kEvzNFG6aI
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-