Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
029cbe4b572c8b45357a82093458b92a_JaffaCakes118
-
Size
271KB
-
Sample
240930-wl9eeascqg
-
MD5
029cbe4b572c8b45357a82093458b92a
-
SHA1
07dfd22e1ae22915d0ea049df47b24c9714857bc
-
SHA256
7885619deaafb3b2072528aeaebdc6619d4f23a7c925d47b9d00063115339347
-
SHA512
e6685df85b091e19f05967c073ed78b31561c611555714409d96e925387be0d4763c9b99e8815c9b7c9ea2e892d895f639b48b3c855aed9f8a2b659226701b6c
-
SSDEEP
6144:osaocyLCcbjMmWYyjdJpNZM4V8GtDuW1e7wn9ylZGa7:otobrbjMmWYyjdBm4V8eD2u9ynGO
Static task
static1
Behavioral task
behavioral1
Sample
029cbe4b572c8b45357a82093458b92a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
029cbe4b572c8b45357a82093458b92a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/installer5.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/installer5.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
029cbe4b572c8b45357a82093458b92a_JaffaCakes118
-
Size
271KB
-
MD5
029cbe4b572c8b45357a82093458b92a
-
SHA1
07dfd22e1ae22915d0ea049df47b24c9714857bc
-
SHA256
7885619deaafb3b2072528aeaebdc6619d4f23a7c925d47b9d00063115339347
-
SHA512
e6685df85b091e19f05967c073ed78b31561c611555714409d96e925387be0d4763c9b99e8815c9b7c9ea2e892d895f639b48b3c855aed9f8a2b659226701b6c
-
SSDEEP
6144:osaocyLCcbjMmWYyjdJpNZM4V8GtDuW1e7wn9ylZGa7:otobrbjMmWYyjdBm4V8eD2u9ynGO
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
-
-
Target
$PLUGINSDIR/installer5.exe
-
Size
215KB
-
MD5
029162f299af12e48fc5ffde104766e2
-
SHA1
467b9336af5aec76cbb548ece146cd2d7b4e1264
-
SHA256
28e778a7e5f91d27cf37e7ed8624adb8e9f33d7d12d64ed6420b5345052591b0
-
SHA512
fa522ef2364e5a31c119993d8057a3337bffdb7ce259b810efeb59e105885c8ca75086e1d568121600a919ad160e3be2667486ab56de7e7393df8d895293863c
-
SSDEEP
6144:CDsvqBa8e7G39JPeepCbyGHyWqTW6h9EZLgee3Br:CDsvq8899zCEh9U4
Score6/10-
Drops desktop.ini file(s)
-
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
8KB
-
MD5
249ae678f0dac4c625c6de6aca53823a
-
SHA1
6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201
-
SHA256
7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce
-
SHA512
66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7
-
SSDEEP
192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR
Score3/10 -