Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5ef3cfe85f39c6dcd0ee95be6595fd38_JaffaCakes118
-
Size
60KB
-
Sample
241019-19hc2svaqj
-
MD5
5ef3cfe85f39c6dcd0ee95be6595fd38
-
SHA1
0568ac0937ac011dfdb7348b91967c07d53668c6
-
SHA256
87196bef52a9769d6fc0ee185e9d15cb5ab134d2a821547ce5fee82c4657933a
-
SHA512
203202f319d1923539b0f33ecd0728c13d0cf6eb81f6cb6583be6fdc6f20518e04eaaa003beeeb08afdf3b5019627a5bdab5b79b34949f92e4d34c4066ea76a1
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP+:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdN
Static task
static1
Behavioral task
behavioral1
Sample
5ef3cfe85f39c6dcd0ee95be6595fd38_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
5ef3cfe85f39c6dcd0ee95be6595fd38_JaffaCakes118
-
Size
60KB
-
MD5
5ef3cfe85f39c6dcd0ee95be6595fd38
-
SHA1
0568ac0937ac011dfdb7348b91967c07d53668c6
-
SHA256
87196bef52a9769d6fc0ee185e9d15cb5ab134d2a821547ce5fee82c4657933a
-
SHA512
203202f319d1923539b0f33ecd0728c13d0cf6eb81f6cb6583be6fdc6f20518e04eaaa003beeeb08afdf3b5019627a5bdab5b79b34949f92e4d34c4066ea76a1
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP+:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdN
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-