Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_70a4fc39936cd3d4db69ffb44168e10e
-
Size
101KB
-
Sample
250313-p1qsaawjt8
-
MD5
70a4fc39936cd3d4db69ffb44168e10e
-
SHA1
4bf5511104a664a1f2ad5e5a1490d191ce8eca2b
-
SHA256
26cd632ec0543e80571bb60ccf1e1b77a221f238c1849e0108846461c7ca7736
-
SHA512
c8b682da3fd818a064391e624ae4f59ccaa30e8e98e4df1146156cd2e60cf2fef72da39d281cf140a30f86790af2762b6399d658b053f3c1913174339b37efd5
-
SSDEEP
3072:ldAEg4EBjcrt7ySrNcDh7UTc1mE1DQVF/QxXsTN:jNgAhrNcGBVFWaN
Behavioral task
behavioral1
Sample
JaffaCakes118_70a4fc39936cd3d4db69ffb44168e10e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_70a4fc39936cd3d4db69ffb44168e10e.exe
Resource
win10v2004-20250217-en
Malware Config
Targets
-
-
Target
JaffaCakes118_70a4fc39936cd3d4db69ffb44168e10e
-
Size
101KB
-
MD5
70a4fc39936cd3d4db69ffb44168e10e
-
SHA1
4bf5511104a664a1f2ad5e5a1490d191ce8eca2b
-
SHA256
26cd632ec0543e80571bb60ccf1e1b77a221f238c1849e0108846461c7ca7736
-
SHA512
c8b682da3fd818a064391e624ae4f59ccaa30e8e98e4df1146156cd2e60cf2fef72da39d281cf140a30f86790af2762b6399d658b053f3c1913174339b37efd5
-
SSDEEP
3072:ldAEg4EBjcrt7ySrNcDh7UTc1mE1DQVF/QxXsTN:jNgAhrNcGBVFWaN
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-