Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ffb9eefb050382085d620cafd119e22e_JaffaCakes118
-
Size
640KB
-
Sample
240930-cfhjyssbmk
-
MD5
ffb9eefb050382085d620cafd119e22e
-
SHA1
43f4e0afed4b5dbfe0c838070f9d7aa4cf7f64ad
-
SHA256
9ad9a6aa2a21b91ae6015c67191273791cd8406d97193d1563064c4d7b9c017a
-
SHA512
3a473e63e0cb3c40b040e354930ccb8419ed5bd884483234901d16df0c06e041ac69153b3200b9116dbc53b45bf0fb2681ab8643eba9e9be45c51947db18bd9f
-
SSDEEP
12288:5na9giX+IuJQH520T4WuHePvFmWeJKKacwtcvS38LCJQBtdGs1rBLsJ:5na2DctTs6FmWeIcmkS3rJQBtUkBgJ
Static task
static1
Behavioral task
behavioral1
Sample
ffb9eefb050382085d620cafd119e22e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffb9eefb050382085d620cafd119e22e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ffb9eefb050382085d620cafd119e22e_JaffaCakes118
-
Size
640KB
-
MD5
ffb9eefb050382085d620cafd119e22e
-
SHA1
43f4e0afed4b5dbfe0c838070f9d7aa4cf7f64ad
-
SHA256
9ad9a6aa2a21b91ae6015c67191273791cd8406d97193d1563064c4d7b9c017a
-
SHA512
3a473e63e0cb3c40b040e354930ccb8419ed5bd884483234901d16df0c06e041ac69153b3200b9116dbc53b45bf0fb2681ab8643eba9e9be45c51947db18bd9f
-
SSDEEP
12288:5na9giX+IuJQH520T4WuHePvFmWeJKKacwtcvS38LCJQBtdGs1rBLsJ:5na2DctTs6FmWeIcmkS3rJQBtUkBgJ
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-