Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
15e54d007bb01798f0e80f3166e5f94c_JaffaCakes118
-
Size
40KB
-
Sample
241005-dgfx7a1gjj
-
MD5
15e54d007bb01798f0e80f3166e5f94c
-
SHA1
80e834dadaa2ae376d63a1d65159df18b57dbd29
-
SHA256
f59db1575f20d1c0c79a78d00289aa6f271b36620724a47ab00def2183060851
-
SHA512
11aaccb848c14bae6f0d45581e3249085eb828225ac42b08861febea948d58e4e355fff9e7b1048540e5e356ecfca273ebc326ad8ebcb6a0219c1a910406ae00
-
SSDEEP
384:2FdKl3cRVsTtTuGtPKtxxj8THpN+iQkjnRkcWBBobIiN5xeiuP9zl6l+Zcijrg1W:E9RVsxfVnKnQTxgZbcSY1cki
Static task
static1
Behavioral task
behavioral1
Sample
15e54d007bb01798f0e80f3166e5f94c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15e54d007bb01798f0e80f3166e5f94c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
15e54d007bb01798f0e80f3166e5f94c_JaffaCakes118
-
Size
40KB
-
MD5
15e54d007bb01798f0e80f3166e5f94c
-
SHA1
80e834dadaa2ae376d63a1d65159df18b57dbd29
-
SHA256
f59db1575f20d1c0c79a78d00289aa6f271b36620724a47ab00def2183060851
-
SHA512
11aaccb848c14bae6f0d45581e3249085eb828225ac42b08861febea948d58e4e355fff9e7b1048540e5e356ecfca273ebc326ad8ebcb6a0219c1a910406ae00
-
SSDEEP
384:2FdKl3cRVsTtTuGtPKtxxj8THpN+iQkjnRkcWBBobIiN5xeiuP9zl6l+Zcijrg1W:E9RVsxfVnKnQTxgZbcSY1cki
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Enumerates processes with tasklist
-