Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
12cb50cc1b1f45edf9be50b37df4ccc6_JaffaCakes118
-
Size
165KB
-
Sample
241004-lketas1crf
-
MD5
12cb50cc1b1f45edf9be50b37df4ccc6
-
SHA1
5e42fd958688c413ba7fbc9d26b5466d45a40e8d
-
SHA256
b8bd5f1e3ca43575f580ec2202bb2edf11b828347e5537a5a8d3a34e6ec02531
-
SHA512
c95313958de1ae0460125e143ba93aff43853aa48e83c98c74c6fa182b3194e339c00eb31070b2741cf48b33cdcb077f806451532eea77fa993e33215d279a2c
-
SSDEEP
3072:M4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:DiI/PlY37ZLF4Ca6WABqBOvs
Static task
static1
Behavioral task
behavioral1
Sample
12cb50cc1b1f45edf9be50b37df4ccc6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
12cb50cc1b1f45edf9be50b37df4ccc6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
12cb50cc1b1f45edf9be50b37df4ccc6_JaffaCakes118
-
Size
165KB
-
MD5
12cb50cc1b1f45edf9be50b37df4ccc6
-
SHA1
5e42fd958688c413ba7fbc9d26b5466d45a40e8d
-
SHA256
b8bd5f1e3ca43575f580ec2202bb2edf11b828347e5537a5a8d3a34e6ec02531
-
SHA512
c95313958de1ae0460125e143ba93aff43853aa48e83c98c74c6fa182b3194e339c00eb31070b2741cf48b33cdcb077f806451532eea77fa993e33215d279a2c
-
SSDEEP
3072:M4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:DiI/PlY37ZLF4Ca6WABqBOvs
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-