Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d99643313b63f4d16b804df58c1cf0de_JaffaCakes118
-
Size
383KB
-
Sample
240911-er1wsasgqd
-
MD5
d99643313b63f4d16b804df58c1cf0de
-
SHA1
a90b9c961c7a322b86511daa1a30829621cc77d8
-
SHA256
a091b5a3a45f91cc7624ebc9910e9fb771cdbeae985ae5ffc448bdd6eb3bf8c6
-
SHA512
11ccfa6cebe9a6973a591e624e3897d72ee3a79415fd1ddc0efca2bd72c1ad9d505643c1deb39dd001f3a03041fe42b288a821d5d1947d7ca6c59bb6750cf587
-
SSDEEP
6144:zt/w53vJ5ITqLjOafQgO0gDAPExZ8hFIALXcvy4YNxDna3MBVzcoE7qA/GzCRuaN:zEvJ5I2LjOmQgBg8PCuIa0YNZ5hDOklM
Behavioral task
behavioral1
Sample
d99643313b63f4d16b804df58c1cf0de_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d99643313b63f4d16b804df58c1cf0de_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d99643313b63f4d16b804df58c1cf0de_JaffaCakes118
-
Size
383KB
-
MD5
d99643313b63f4d16b804df58c1cf0de
-
SHA1
a90b9c961c7a322b86511daa1a30829621cc77d8
-
SHA256
a091b5a3a45f91cc7624ebc9910e9fb771cdbeae985ae5ffc448bdd6eb3bf8c6
-
SHA512
11ccfa6cebe9a6973a591e624e3897d72ee3a79415fd1ddc0efca2bd72c1ad9d505643c1deb39dd001f3a03041fe42b288a821d5d1947d7ca6c59bb6750cf587
-
SSDEEP
6144:zt/w53vJ5ITqLjOafQgO0gDAPExZ8hFIALXcvy4YNxDna3MBVzcoE7qA/GzCRuaN:zEvJ5I2LjOmQgBg8PCuIa0YNZ5hDOklM
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-