Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0f4a271d5e35dfcbe87ce423edc355a9_JaffaCakes118
-
Size
165KB
-
Sample
241003-sf3g5avdpc
-
MD5
0f4a271d5e35dfcbe87ce423edc355a9
-
SHA1
352855208701d059ab9cb0ba2772971166db5457
-
SHA256
4cad9a119d5847408987226dae0d4c0a741db51aa48a23ec4ddacade361cc62b
-
SHA512
b19f236bcbc42b270b2f3ab5ee7521434016730df0de1502167351bfaab08a85496062d79c830c0838ecbb97c1464964fe30ec16ca865131ac434d35e78205b7
-
SSDEEP
3072:T4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:siI/PlY37ZLF4Ca6WABqBOvs
Static task
static1
Behavioral task
behavioral1
Sample
0f4a271d5e35dfcbe87ce423edc355a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f4a271d5e35dfcbe87ce423edc355a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
0f4a271d5e35dfcbe87ce423edc355a9_JaffaCakes118
-
Size
165KB
-
MD5
0f4a271d5e35dfcbe87ce423edc355a9
-
SHA1
352855208701d059ab9cb0ba2772971166db5457
-
SHA256
4cad9a119d5847408987226dae0d4c0a741db51aa48a23ec4ddacade361cc62b
-
SHA512
b19f236bcbc42b270b2f3ab5ee7521434016730df0de1502167351bfaab08a85496062d79c830c0838ecbb97c1464964fe30ec16ca865131ac434d35e78205b7
-
SSDEEP
3072:T4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:siI/PlY37ZLF4Ca6WABqBOvs
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-