Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
17a657ffb17657cf3011b32f2ef9c181_JaffaCakes118
-
Size
164KB
-
Sample
241006-l5aebaybll
-
MD5
17a657ffb17657cf3011b32f2ef9c181
-
SHA1
c991159be23524d5cb0969c06af20948705f4355
-
SHA256
762fe5820783e86f95f7af6cb8b9826ff9afc4af4afb20efaef65f09bdde198f
-
SHA512
1818b97c0397bf84bb30d6f4ff2d3500696d423c8eec692d29cc230c96fa35bf243171b8d3b45d1e7fbf5f883cd033ab73dada0af0ab209482df415bdcfd706f
-
SSDEEP
3072:3imnuVXjzu3vsLrP5voun/VqIoKJfma7tYEoFMhY:Nulu3vsPfdqIoK0a7BK
Static task
static1
Behavioral task
behavioral1
Sample
17a657ffb17657cf3011b32f2ef9c181_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17a657ffb17657cf3011b32f2ef9c181_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
17a657ffb17657cf3011b32f2ef9c181_JaffaCakes118
-
Size
164KB
-
MD5
17a657ffb17657cf3011b32f2ef9c181
-
SHA1
c991159be23524d5cb0969c06af20948705f4355
-
SHA256
762fe5820783e86f95f7af6cb8b9826ff9afc4af4afb20efaef65f09bdde198f
-
SHA512
1818b97c0397bf84bb30d6f4ff2d3500696d423c8eec692d29cc230c96fa35bf243171b8d3b45d1e7fbf5f883cd033ab73dada0af0ab209482df415bdcfd706f
-
SSDEEP
3072:3imnuVXjzu3vsLrP5voun/VqIoKJfma7tYEoFMhY:Nulu3vsPfdqIoK0a7BK
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-