Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
090f4cb4b274377597f6059a14c20591_JaffaCakes118
-
Size
269KB
-
Sample
241002-fxj1wsyepj
-
MD5
090f4cb4b274377597f6059a14c20591
-
SHA1
5e89b1b5c045dae8a25043c88acef5f65a686a9a
-
SHA256
066d1bce173ce7dbe5966faae973453f71a576b2e528ba02abf66c008b321938
-
SHA512
af36d504a2c96f3a48c1882690beb9a61f0bf243ff148311dd30434496c3af04ca4f87779b2413ff2219543406de201e618dfbc2f1043a3a6d496b86aaa20dd8
-
SSDEEP
6144:hsaocyLCQluuL1glyCHIsQGFSI9kA1etW3DxPA8NoYd0:htobjthgwCoij+DtYY8Nu
Static task
static1
Behavioral task
behavioral1
Sample
090f4cb4b274377597f6059a14c20591_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
090f4cb4b274377597f6059a14c20591_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/installer5.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/installer5.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
090f4cb4b274377597f6059a14c20591_JaffaCakes118
-
Size
269KB
-
MD5
090f4cb4b274377597f6059a14c20591
-
SHA1
5e89b1b5c045dae8a25043c88acef5f65a686a9a
-
SHA256
066d1bce173ce7dbe5966faae973453f71a576b2e528ba02abf66c008b321938
-
SHA512
af36d504a2c96f3a48c1882690beb9a61f0bf243ff148311dd30434496c3af04ca4f87779b2413ff2219543406de201e618dfbc2f1043a3a6d496b86aaa20dd8
-
SSDEEP
6144:hsaocyLCQluuL1glyCHIsQGFSI9kA1etW3DxPA8NoYd0:htobjthgwCoij+DtYY8Nu
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
-
-
Target
$PLUGINSDIR/installer5.exe
-
Size
215KB
-
MD5
029162f299af12e48fc5ffde104766e2
-
SHA1
467b9336af5aec76cbb548ece146cd2d7b4e1264
-
SHA256
28e778a7e5f91d27cf37e7ed8624adb8e9f33d7d12d64ed6420b5345052591b0
-
SHA512
fa522ef2364e5a31c119993d8057a3337bffdb7ce259b810efeb59e105885c8ca75086e1d568121600a919ad160e3be2667486ab56de7e7393df8d895293863c
-
SSDEEP
6144:CDsvqBa8e7G39JPeepCbyGHyWqTW6h9EZLgee3Br:CDsvq8899zCEh9U4
Score6/10-
Drops desktop.ini file(s)
-
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
8KB
-
MD5
249ae678f0dac4c625c6de6aca53823a
-
SHA1
6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201
-
SHA256
7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce
-
SHA512
66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7
-
SSDEEP
192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR
Score3/10 -