Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4652c51f0151ef7fda74c9c7436465d4_JaffaCakes118
-
Size
228KB
-
Sample
241015-hg2l4szfrc
-
MD5
4652c51f0151ef7fda74c9c7436465d4
-
SHA1
e41602271f80251b55b059c95a145b5b65beb619
-
SHA256
2b635d8635b3cd6988d632abf431b7bcfdab8f48ea904611ae0fb8426a254db5
-
SHA512
742cc0dbb3176bcf078768781b9ac07385510cf4199a710b2d6236907ad72cb88be2df725c2aac7ef8b7f89eb13efe6fc6639ab0c551334fa08ef307362608cd
-
SSDEEP
6144:fAmIhgpYy4c2+keFKEK7kmR/qszYX1932QVTH3jRVI6a:fVIhgpYR+keoAmRCsm9Zs
Behavioral task
behavioral1
Sample
4652c51f0151ef7fda74c9c7436465d4_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
4652c51f0151ef7fda74c9c7436465d4_JaffaCakes118
-
Size
228KB
-
MD5
4652c51f0151ef7fda74c9c7436465d4
-
SHA1
e41602271f80251b55b059c95a145b5b65beb619
-
SHA256
2b635d8635b3cd6988d632abf431b7bcfdab8f48ea904611ae0fb8426a254db5
-
SHA512
742cc0dbb3176bcf078768781b9ac07385510cf4199a710b2d6236907ad72cb88be2df725c2aac7ef8b7f89eb13efe6fc6639ab0c551334fa08ef307362608cd
-
SSDEEP
6144:fAmIhgpYy4c2+keFKEK7kmR/qszYX1932QVTH3jRVI6a:fVIhgpYR+keoAmRCsm9Zs
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-