Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 19:05
Static task
static1
Behavioral task
behavioral1
Sample
0da1d4bd5df6b458e584b15fd48fb705_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0da1d4bd5df6b458e584b15fd48fb705_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0da1d4bd5df6b458e584b15fd48fb705_JaffaCakes118.exe
-
Size
130KB
-
MD5
0da1d4bd5df6b458e584b15fd48fb705
-
SHA1
554e7661a2eb3867b42f3cde8884603e00a49569
-
SHA256
863554520a4b52d05828943218c7e7c6115a87d3836cddc16d6c484f89fb6a66
-
SHA512
bce08e22719a15ad81735626a63f947e687e49d0768991292c4af447fee8ab8aaa3ba4b2d9507b0cbbe996259271227e4cc02b14b6baca19d632148bddcb4061
-
SSDEEP
1536:Y/+J/2d2Bv/JDFYxG0//xLHIgdrXHfmmQVZfLrmtfwGpi+x8k0Ysu06ouqA4w8oJ:Y/I2cKfZvFXHfmlDsco+Wf+J8xbvxTou
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Windows\CurrentVersion\Run\f4yxezmlii = "C:\\Users\\Admin\\AppData\\Local\\Temp\\0da1d4bd5df6b458e584b15fd48fb705_JaffaCakes118.exe" 0da1d4bd5df6b458e584b15fd48fb705_JaffaCakes118.exe