Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
db10a272f6a234ccc6021ff2b2444e34_JaffaCakes118
-
Size
44KB
-
Sample
240911-x5gn6syfkb
-
MD5
db10a272f6a234ccc6021ff2b2444e34
-
SHA1
4791b97d12871a03bbb3cd19aa913cd4b9405c67
-
SHA256
ca34ae2c05e708d668058dbc4b0dadb7ad6a532e45dc63075002a9bcaa3717cd
-
SHA512
038e24360acb880a9f5bdb2c2a8c142254dfb41c38b4a4c6a2952048a84187982b7323a2f5b2d2465fd8565450631573765e977d307a7b88aef087d0a5ce2c05
-
SSDEEP
768:83n3G3j3qrJFTQTz/BoBrlKLXZ1ufT1LTRPYF2KvNdVSNode:83n3G3j3sqB6lKXufhLNYbvNbDe
Static task
static1
Behavioral task
behavioral1
Sample
db10a272f6a234ccc6021ff2b2444e34_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db10a272f6a234ccc6021ff2b2444e34_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
db10a272f6a234ccc6021ff2b2444e34_JaffaCakes118
-
Size
44KB
-
MD5
db10a272f6a234ccc6021ff2b2444e34
-
SHA1
4791b97d12871a03bbb3cd19aa913cd4b9405c67
-
SHA256
ca34ae2c05e708d668058dbc4b0dadb7ad6a532e45dc63075002a9bcaa3717cd
-
SHA512
038e24360acb880a9f5bdb2c2a8c142254dfb41c38b4a4c6a2952048a84187982b7323a2f5b2d2465fd8565450631573765e977d307a7b88aef087d0a5ce2c05
-
SSDEEP
768:83n3G3j3qrJFTQTz/BoBrlKLXZ1ufT1LTRPYF2KvNdVSNode:83n3G3j3sqB6lKXufhLNYbvNbDe
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-