Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fb0d1f697f9a1f153511ecd696874f90_JaffaCakes118
-
Size
144KB
-
Sample
240927-2vlbtswekh
-
MD5
fb0d1f697f9a1f153511ecd696874f90
-
SHA1
0e6e6d10c112563e65eb753fc90bf22805d63536
-
SHA256
e4798759880902ac498ddecafd10eca6e459ac5ab18aef5bba679b729113ba25
-
SHA512
abc910f6f8352b163754413a12fa38106f9b8d9a75ef71631600a51b1e7ec7e52b01a67e4f1efadd10f5d164f294a1abf6529d181ffe9388b048304cb9c7d541
-
SSDEEP
1536:Z6F7+RXy+NU0xNOQDWPIXqrN/8SKH334uG8P955BtpYWCVCFIfmE1KmY4ULJLiz7:Eim0/OQDMI+0L0WCQZMnd98zZ7fgMti
Static task
static1
Behavioral task
behavioral1
Sample
fb0d1f697f9a1f153511ecd696874f90_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb0d1f697f9a1f153511ecd696874f90_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
fb0d1f697f9a1f153511ecd696874f90_JaffaCakes118
-
Size
144KB
-
MD5
fb0d1f697f9a1f153511ecd696874f90
-
SHA1
0e6e6d10c112563e65eb753fc90bf22805d63536
-
SHA256
e4798759880902ac498ddecafd10eca6e459ac5ab18aef5bba679b729113ba25
-
SHA512
abc910f6f8352b163754413a12fa38106f9b8d9a75ef71631600a51b1e7ec7e52b01a67e4f1efadd10f5d164f294a1abf6529d181ffe9388b048304cb9c7d541
-
SSDEEP
1536:Z6F7+RXy+NU0xNOQDWPIXqrN/8SKH334uG8P955BtpYWCVCFIfmE1KmY4ULJLiz7:Eim0/OQDMI+0L0WCQZMnd98zZ7fgMti
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-