Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
28/04/2024, 07:50
Static task
static1
Behavioral task
behavioral1
Sample
04b59991e1ac5b0b5fb1273f8d90ce75_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
04b59991e1ac5b0b5fb1273f8d90ce75_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
04b59991e1ac5b0b5fb1273f8d90ce75_JaffaCakes118.exe
-
Size
450KB
-
MD5
04b59991e1ac5b0b5fb1273f8d90ce75
-
SHA1
3670fdad869d5ab59d138aabc56f789fbe8f299e
-
SHA256
c5641118624861ba44060cde9e621b261275e1fbd743592bdd1994c69ef7f37f
-
SHA512
fa7789c498a621111b93c2d4a95f98e1736257ab218735b854de371dd3add14538b5504c94194ba571af97777c7fff7ea83cde47ee7ed94583de8818bdae615b
-
SSDEEP
6144:gs833CnotE7RN8Jqeh5sIgD+U/MsqJwu7Bn6nVIdluqCTX2J/wJ9SqSil:mLtE7RaAeUp+ULMniCluqA2iJ8Vil
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\System-Service = "C:\\Windows\\SYSTEM\\EXPLORER.SCR" 04b59991e1ac5b0b5fb1273f8d90ce75_JaffaCakes118.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\SYSTEM\EXPLORER.SCR 04b59991e1ac5b0b5fb1273f8d90ce75_JaffaCakes118.exe File opened for modification C:\Windows\SYSTEM\EXPLORER.SCR 04b59991e1ac5b0b5fb1273f8d90ce75_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
492KB
MD5d9ea8c0df61344962e4a531c650445f7
SHA1b9c6308f847e355821c0d194c32b0270beef398a
SHA25675114e39d629cf04fffd830f3ee8f2e60646dc296ba661385ded3a6c7e846d63
SHA512181dadaaddf1c8ccde02be904a422e7bd3d211aaf5affe119f6b792e4f539400943a07e7863ca5cd709b10e467903ad1fb780a6ec963e74a4776c1c5de56d508