Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21/04/2024, 15:45
Static task
static1
Behavioral task
behavioral1
Sample
ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe
-
Size
387KB
-
MD5
ff9f78c37bfa63faf0c76bd06ea0c465
-
SHA1
bb34feb046b9606626ec8a4f4b1e28ad21f86a8d
-
SHA256
fd770aea5686d9c4defeee8b61c5a40ef708717e67f17ee8d6d76558acceaa44
-
SHA512
9a281a9495e3fd46659e968fb47d434cf849b934fea3b2a83a709188a5ccc04a2f84a254a73736a0f327e598af419ef30d6ca24854369f8a833a560f0ab5cd67
-
SSDEEP
6144:9ijinB2nS1zOl96C+01u8VvsisxDynP+X1tusCT0ji+mhV9+1eyEl0SSOZBH6bz:9U+1zp01ECPS1tuLT02+k+1eyE0g6bz
Malware Config
Signatures
-
Drops desktop.ini file(s) 6 IoCs
description ioc Process File opened for modification \??\c:\Program Files\desktop.ini ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\$Recycle.Bin\S-1-5-21-330940541-141609230-1670313778-1000\desktop.ini ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\$Recycle.Bin\S-1-5-21-330940541-141609230-1670313778-1000\desktop.ini ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\desktop.ini ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification \??\c:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\pop3.jar ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\bin\wsimport.exe ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\System\msadc\ja-JP\msadcer.dll.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\System\ado\adovbs.inc ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\vignettemask25.png ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\MSInfo\es-ES\msinfo32.exe.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_performance_Thumbnail.bmp ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\vk_swiftshader_icd.json ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\toc.gif ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\UTC ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\ink\mshwjpnr.dll ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.metadata.repository.prefs ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_SelectionSubpicture.png ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\DVD Maker\Shared\DvdStyles\Postage_SelectionSubpicture.png ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Adak ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+3 ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\7-Zip\Lang\pt.txt ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\Common Files\System\msadc\fr-FR\msadcor.dll.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\keytool.exe ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nipigon ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\include\win32\jni_md.h ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\DVD Maker\it-IT\OmdProject.dll.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\Louisville ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\MANIFEST.MF ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCalls.h ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\calendars.properties ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nome ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\Common Files\Microsoft Shared\ink\de-DE\micaut.dll.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\hi.pak ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Internet Explorer\ieproxy.dll ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\Common Files\System\Ole DB\sqlxmlx.rll ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaSansDemiBold.ttf ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\manifest.json ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\epl-v10.html ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha1.png ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\toc.xml ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File created \??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\DVD Maker\offset.ax ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe File opened for modification \??\c:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_ButtonGraphic.png ff9f78c37bfa63faf0c76bd06ea0c465_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.9MB
MD5804642cc33a00b326eec6ae633c56212
SHA10da13e83da551f77060edaddf03879b7b0560101
SHA2562663d2522ae1ca9efd5e407c78400830658297facccbab1413ad71f21fc3836a
SHA5128d75d2fb384074d7113dfbce3f12ddf1a6cd0cad1707dd6b74e1cf3e910b4dac31164521f927ea84d18e31eca9ae8f0553e1f4a89326424fb9ad8ff38e13a3b7
-
Filesize
5B
MD5b5b682b742431a52ea8b17c72ad9c572
SHA1326320f469235708c59f678c9a7357dca552d306
SHA25630d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76
SHA5124e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html
Filesize12KB
MD5386b6087dd9575fc6b8ada0f7a463723
SHA15373d4ffd89438a60b8ae0858c3bc4e8d37f540a
SHA256ef494685ac9644ba5672cfc49c6efe5e09a2d71706d5cf4b57171f7d5f7a70d1
SHA5121d39dd2dd736431ebe0e7f16a9f10b748e522cfee03a187ad020708e48ed676a21eef6b3ac3b1f600cff2e19f1d30ca25f682fe773650b3fc97e20f0afd8557b
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html
Filesize8KB
MD58ed35e04c7556933d923ee706f8312d7
SHA115b0c7aae539b756640e9d28e6f68d82bd5b9294
SHA256f2f8e2280b4118ce0ecbf0c58b73fba5e9666f8cdb53fabe8a1fb6fbcd48e2c7
SHA5123f37e8d86d9495f5a5ba4639c2b178d8c3ce0236d4578638630fc901fd4c6d0d40fd3e57e0e28ad9e049295425864a14bf32d1368769e19e749226c5ff84e84b
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf
Filesize62B
MD5f6dbc4b34179e10f9b6c0e2d5d24c2c6
SHA11c53d71700022886c41b568a9514924fd3c1c62b
SHA25605df06e24037881941804db6ca15f7a25dd10a536b0f642e7a3d09de07256206
SHA51225a2bc555f2e49610a0490377bf687188f7e13931cbd8e29482584e552b65a2e51fe84fa5153825517a011d7b65df831911c302ae482b23fa0b118524e8af24b
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA
Filesize7KB
MD56a922ae3979f4cd80d73e62711c19826
SHA14cc0a5bf46db54e1c54059394fb9f64b95d4ef69
SHA2569cd780aa41ad06ec2e7f40837e69fa0c02a8f069e51ca8c8622b5e43ab84fb61
SHA512a285f8c0b5deb7a22bfe98c31c1bb44ad2cec3c512b0b0a018c6a8ca51718c6cbd5f805236dcf1c6d6e2b8a8f91d521b1653c055c9d71f67c4de5579047040f3