Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

1

61020934fd...18.exe

windows7-x64

6

61020934fd...18.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 20:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    61020934fd93380c903fe7e07024d464_JaffaCakes118.exe

  • Size

    286KB

  • MD5

    61020934fd93380c903fe7e07024d464

  • SHA1

    4db9c59757a5ba4e0dd096b7fbe0e89d4c15ecc5

  • SHA256

    055246db73c90e6fea5664fa48273ad700321bd3a1bbc5f66d79f4de3e70ee95

  • SHA512

    27f4588f0f60203a3e586bbc0b4390e7a7da8dcd1deeb208e32917c4095746280a38231e37c0dc0a87bd73c220958c932bb8f571101dfd0bee1033342e40937d

  • SSDEEP

    3072:yMppWgze+issmpKw+kDQ9MWuyWrw7DTBa5uUHjk3r9jYLfAmVW63q30eictT:yMvXKssmpKDQwUo3mjp3gfiY

Score
6/10
discovery

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\61020934fd93380c903fe7e07024d464_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\61020934fd93380c903fe7e07024d464_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:2424

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2424-0-0x00000000010E0000-0x0000000001120000-memory.dmp

    Filesize

    256KB

    Download

  • memory/2424-2-0x0000000000160000-0x000000000018F000-memory.dmp

    Filesize

    188KB

    Download