Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3ae0164b5e4d31e6f7b6eacffc9b6571_JaffaCakes118
-
Size
269KB
-
Sample
241012-tdpc6ashmj
-
MD5
3ae0164b5e4d31e6f7b6eacffc9b6571
-
SHA1
74be75a457df411da2f665fd9c8275dc5dc655ab
-
SHA256
6b2fee8e0efdef0ee1e942e863f28282a3be178b2e2ad0fac82cf8c842cbd955
-
SHA512
8a2155c64cc2a1137fbcf37a013b851890cec9f1358d615f97b272b033be97219e8c1d763bebaa54e71f3cc45d7639653a2611b76f25ffdd750bdb387147d9bc
-
SSDEEP
6144:6saocyLCk+fqKKGcZUxA4gP3xZF7vbIEHXYLC8fbVXt:6tob3+fyzZUWv97vHXQ/fbVXt
Static task
static1
Behavioral task
behavioral1
Sample
3ae0164b5e4d31e6f7b6eacffc9b6571_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3ae0164b5e4d31e6f7b6eacffc9b6571_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/installer5.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/installer5.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
3ae0164b5e4d31e6f7b6eacffc9b6571_JaffaCakes118
-
Size
269KB
-
MD5
3ae0164b5e4d31e6f7b6eacffc9b6571
-
SHA1
74be75a457df411da2f665fd9c8275dc5dc655ab
-
SHA256
6b2fee8e0efdef0ee1e942e863f28282a3be178b2e2ad0fac82cf8c842cbd955
-
SHA512
8a2155c64cc2a1137fbcf37a013b851890cec9f1358d615f97b272b033be97219e8c1d763bebaa54e71f3cc45d7639653a2611b76f25ffdd750bdb387147d9bc
-
SSDEEP
6144:6saocyLCk+fqKKGcZUxA4gP3xZF7vbIEHXYLC8fbVXt:6tob3+fyzZUWv97vHXQ/fbVXt
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
-
-
Target
$PLUGINSDIR/installer5.exe
-
Size
215KB
-
MD5
029162f299af12e48fc5ffde104766e2
-
SHA1
467b9336af5aec76cbb548ece146cd2d7b4e1264
-
SHA256
28e778a7e5f91d27cf37e7ed8624adb8e9f33d7d12d64ed6420b5345052591b0
-
SHA512
fa522ef2364e5a31c119993d8057a3337bffdb7ce259b810efeb59e105885c8ca75086e1d568121600a919ad160e3be2667486ab56de7e7393df8d895293863c
-
SSDEEP
6144:CDsvqBa8e7G39JPeepCbyGHyWqTW6h9EZLgee3Br:CDsvq8899zCEh9U4
Score6/10-
Drops desktop.ini file(s)
-
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
8KB
-
MD5
249ae678f0dac4c625c6de6aca53823a
-
SHA1
6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201
-
SHA256
7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce
-
SHA512
66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7
-
SSDEEP
192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR
Score3/10 -