Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
12deba0b037118181b7c0f6277baaf67_JaffaCakes118
-
Size
45KB
-
Sample
241004-l1j3yssblb
-
MD5
12deba0b037118181b7c0f6277baaf67
-
SHA1
46fc4fb95d3a2720669ded9d0506506619c1118b
-
SHA256
f5fc522ee7ea42699bee0f64510ecf5194f073a4029af9995a2f236a144a7b59
-
SHA512
96487cdf72f76fd70a1034e86adb6ae8380807c19eb65a1b72d6d3370cdd3386b735751132123d75706e22ba067d8148ce340c25749b385b5ac07e705bf77bb7
-
SSDEEP
768:Q6MDEOgk6guQrhO23k7/9sppE0iKFz89519yFSUKhJJ16c5Qbdk1Kj30ZRfJLJVS:gExDPQ9l3ky88x8vTJJ16mQbdUKLwRZe
Static task
static1
Behavioral task
behavioral1
Sample
12deba0b037118181b7c0f6277baaf67_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
12deba0b037118181b7c0f6277baaf67_JaffaCakes118
-
Size
45KB
-
MD5
12deba0b037118181b7c0f6277baaf67
-
SHA1
46fc4fb95d3a2720669ded9d0506506619c1118b
-
SHA256
f5fc522ee7ea42699bee0f64510ecf5194f073a4029af9995a2f236a144a7b59
-
SHA512
96487cdf72f76fd70a1034e86adb6ae8380807c19eb65a1b72d6d3370cdd3386b735751132123d75706e22ba067d8148ce340c25749b385b5ac07e705bf77bb7
-
SSDEEP
768:Q6MDEOgk6guQrhO23k7/9sppE0iKFz89519yFSUKhJJ16c5Qbdk1Kj30ZRfJLJVS:gExDPQ9l3ky88x8vTJJ16mQbdUKLwRZe
-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-