Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0acba0ac120021257125a88dbc2cdd50_JaffaCakes118
-
Size
1.7MB
-
Sample
241002-p927nsxcqm
-
MD5
0acba0ac120021257125a88dbc2cdd50
-
SHA1
99b7514d72734db709c489604f6d30ee5ffff463
-
SHA256
d93bdd46966fc445cbd034548bdbb547ea4e499a7ac0eb0db04b76b13bf04fd9
-
SHA512
4314c323d3d7743970bf8477d827ee6a8a3c51cd839b2fdf28eef4e34a73efd04687e2b0a82031e08165232113c2ce0828daa537ebbc1a8766d1c7305f97158c
-
SSDEEP
49152:OZhpafFU8w7Yy2g8+vkJSk1mUlE4M8z4wNCW:Or8f68w7d2P+uSsmUltmwY
Static task
static1
Behavioral task
behavioral1
Sample
0acba0ac120021257125a88dbc2cdd50_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0acba0ac120021257125a88dbc2cdd50_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
0acba0ac120021257125a88dbc2cdd50_JaffaCakes118
-
Size
1.7MB
-
MD5
0acba0ac120021257125a88dbc2cdd50
-
SHA1
99b7514d72734db709c489604f6d30ee5ffff463
-
SHA256
d93bdd46966fc445cbd034548bdbb547ea4e499a7ac0eb0db04b76b13bf04fd9
-
SHA512
4314c323d3d7743970bf8477d827ee6a8a3c51cd839b2fdf28eef4e34a73efd04687e2b0a82031e08165232113c2ce0828daa537ebbc1a8766d1c7305f97158c
-
SSDEEP
49152:OZhpafFU8w7Yy2g8+vkJSk1mUlE4M8z4wNCW:Or8f68w7d2P+uSsmUltmwY
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory
-