Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d54c0d3c13fdd508148a787ea54166c8_JaffaCakes118
-
Size
346KB
-
Sample
240908-3l481s1cpl
-
MD5
d54c0d3c13fdd508148a787ea54166c8
-
SHA1
8fe62a4d00f47e3e8961e7c52682ca643f5206aa
-
SHA256
51081d1dfc23e9c70da4cfa8a79815dd28587d92f087168f91e9684a01646049
-
SHA512
470ed178b5afbecdc966bb6a2f7ae0f0b33ae22103e57b9ba0e6254974dddd5caaeb398aee513dc75355fad11d57d8ddbc1163f43ddefe7da14ef99d5d7d041b
-
SSDEEP
6144:ye34InvlhNC7JuyKAs8LG9R3HNe76JvML/9c7Cr7Ob+FV7:jF+YyXSvi2v2ICvOb+FV7
Static task
static1
Behavioral task
behavioral1
Sample
d54c0d3c13fdd508148a787ea54166c8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d54c0d3c13fdd508148a787ea54166c8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d54c0d3c13fdd508148a787ea54166c8_JaffaCakes118
-
Size
346KB
-
MD5
d54c0d3c13fdd508148a787ea54166c8
-
SHA1
8fe62a4d00f47e3e8961e7c52682ca643f5206aa
-
SHA256
51081d1dfc23e9c70da4cfa8a79815dd28587d92f087168f91e9684a01646049
-
SHA512
470ed178b5afbecdc966bb6a2f7ae0f0b33ae22103e57b9ba0e6254974dddd5caaeb398aee513dc75355fad11d57d8ddbc1163f43ddefe7da14ef99d5d7d041b
-
SSDEEP
6144:ye34InvlhNC7JuyKAs8LG9R3HNe76JvML/9c7Cr7Ob+FV7:jF+YyXSvi2v2ICvOb+FV7
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-