Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
04ada03e237651e65a29cc53c60fc3fd_JaffaCakes118
-
Size
675KB
-
Sample
241001-g6dqxayfqg
-
MD5
04ada03e237651e65a29cc53c60fc3fd
-
SHA1
70adacc3769cc2d4bc1df9a4070bedfb0cd57b4e
-
SHA256
65f53dd927a20a1551a4e2b5d7d9aab0df8146dde78e0abd2f22cbdbcd66feaf
-
SHA512
a5b3902963e6675e8426c2d4791a878449d958570773681120c7d8d8a1f07126eccba9d7f82c4f5e9980f11bcf621158aaf8b4acee8524f9398781bb7b52513b
-
SSDEEP
12288:zd3XQuje75cWCDj/iUVFWZ+eHUwRPUCWesLYJzfkjgmiiXVg6b:z9S75YnZFWZ+e0wRsCWLYFfkjg3iXJb
Static task
static1
Behavioral task
behavioral1
Sample
04ada03e237651e65a29cc53c60fc3fd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
04ada03e237651e65a29cc53c60fc3fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
04ada03e237651e65a29cc53c60fc3fd_JaffaCakes118
-
Size
675KB
-
MD5
04ada03e237651e65a29cc53c60fc3fd
-
SHA1
70adacc3769cc2d4bc1df9a4070bedfb0cd57b4e
-
SHA256
65f53dd927a20a1551a4e2b5d7d9aab0df8146dde78e0abd2f22cbdbcd66feaf
-
SHA512
a5b3902963e6675e8426c2d4791a878449d958570773681120c7d8d8a1f07126eccba9d7f82c4f5e9980f11bcf621158aaf8b4acee8524f9398781bb7b52513b
-
SSDEEP
12288:zd3XQuje75cWCDj/iUVFWZ+eHUwRPUCWesLYJzfkjgmiiXVg6b:z9S75YnZFWZ+e0wRsCWLYFfkjg3iXJb
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-