Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fe9d34a3640baa4564147b746b74eacc_JaffaCakes118
-
Size
388KB
-
Sample
240929-qlmbzswckq
-
MD5
fe9d34a3640baa4564147b746b74eacc
-
SHA1
d4474ee31c77d6764c282a0bdfe4603c5c85a076
-
SHA256
47970273eefc3121742df7535363b7f67898d6a2633b04c2b534e20278ac840a
-
SHA512
47eafe81e5ba9c073d12d6de8706ba4ec82eac0c02c19c3fd0554bdca51d9ea702e66775d9786e2fd20a0182f14853e420cb512e8d7dce8eec27467202efcb98
-
SSDEEP
12288:6utrzh9xOXkFK1F9PVjIqYivDNkNwWO5RFg:6utr5OUFeBTvDyiWO5Ru
Static task
static1
Behavioral task
behavioral1
Sample
fe9d34a3640baa4564147b746b74eacc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe9d34a3640baa4564147b746b74eacc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
fe9d34a3640baa4564147b746b74eacc_JaffaCakes118
-
Size
388KB
-
MD5
fe9d34a3640baa4564147b746b74eacc
-
SHA1
d4474ee31c77d6764c282a0bdfe4603c5c85a076
-
SHA256
47970273eefc3121742df7535363b7f67898d6a2633b04c2b534e20278ac840a
-
SHA512
47eafe81e5ba9c073d12d6de8706ba4ec82eac0c02c19c3fd0554bdca51d9ea702e66775d9786e2fd20a0182f14853e420cb512e8d7dce8eec27467202efcb98
-
SSDEEP
12288:6utrzh9xOXkFK1F9PVjIqYivDNkNwWO5RFg:6utr5OUFeBTvDyiWO5Ru
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-