Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
56ce9883c18aa57ab39273feac5c06fd_JaffaCakes118
-
Size
165KB
-
Sample
241018-lzszgatbkq
-
MD5
56ce9883c18aa57ab39273feac5c06fd
-
SHA1
b89754a7b5414171055b4d7731d47ff5c986fae5
-
SHA256
7f71a92d2d4e46e4eaf29ad28c040464fa9ef1e4d4b3894f24c88ce667dd5844
-
SHA512
3820d994908068521db8615f33f5e9b44e6086a820e880496d14dd8ab5fd143838093fd8a533de611daf3e59f7745c8d3783136ac82b10d7cfffefc2143ebbb4
-
SSDEEP
3072:l4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:WiI/PlY37ZLF4Ca6WABqBOvs
Static task
static1
Behavioral task
behavioral1
Sample
56ce9883c18aa57ab39273feac5c06fd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
56ce9883c18aa57ab39273feac5c06fd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
56ce9883c18aa57ab39273feac5c06fd_JaffaCakes118
-
Size
165KB
-
MD5
56ce9883c18aa57ab39273feac5c06fd
-
SHA1
b89754a7b5414171055b4d7731d47ff5c986fae5
-
SHA256
7f71a92d2d4e46e4eaf29ad28c040464fa9ef1e4d4b3894f24c88ce667dd5844
-
SHA512
3820d994908068521db8615f33f5e9b44e6086a820e880496d14dd8ab5fd143838093fd8a533de611daf3e59f7745c8d3783136ac82b10d7cfffefc2143ebbb4
-
SSDEEP
3072:l4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:WiI/PlY37ZLF4Ca6WABqBOvs
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-