Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3859c7ee07c6e7dc40bca4c603a15850_JaffaCakes118
-
Size
256KB
-
Sample
241012-emqv1swhnk
-
MD5
3859c7ee07c6e7dc40bca4c603a15850
-
SHA1
9fda1431ee61768362d5fde0a3579e622fbb0e0b
-
SHA256
69a162451c048bfcbc1320acdd9a9b5f1f93f7a95227e627b635f082f9212100
-
SHA512
dc08083d80952be71b4f9e306420c2c6ed1e8126ecd4a3aa2133cffcbbd22581d8692a11b4de1dbffb5f57be916c1a8b753da09ee0de8e7c92329584014aba74
-
SSDEEP
6144:kHUd0oTVuUVQBfLnFVh2jeT8l9xw7wHEe:kHzL9iepk
Static task
static1
Behavioral task
behavioral1
Sample
3859c7ee07c6e7dc40bca4c603a15850_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3859c7ee07c6e7dc40bca4c603a15850_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
3859c7ee07c6e7dc40bca4c603a15850_JaffaCakes118
-
Size
256KB
-
MD5
3859c7ee07c6e7dc40bca4c603a15850
-
SHA1
9fda1431ee61768362d5fde0a3579e622fbb0e0b
-
SHA256
69a162451c048bfcbc1320acdd9a9b5f1f93f7a95227e627b635f082f9212100
-
SHA512
dc08083d80952be71b4f9e306420c2c6ed1e8126ecd4a3aa2133cffcbbd22581d8692a11b4de1dbffb5f57be916c1a8b753da09ee0de8e7c92329584014aba74
-
SSDEEP
6144:kHUd0oTVuUVQBfLnFVh2jeT8l9xw7wHEe:kHzL9iepk
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-