Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
23/05/2024, 11:43
Static task
static1
Behavioral task
behavioral1
Sample
6ad4d65cfd5aa3948da347ed1418e131_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6ad4d65cfd5aa3948da347ed1418e131_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
6ad4d65cfd5aa3948da347ed1418e131_JaffaCakes118.exe
-
Size
2.0MB
-
MD5
6ad4d65cfd5aa3948da347ed1418e131
-
SHA1
d31f2b2bacea0668a4c833ffe84059116c54d2e8
-
SHA256
09e8705b7e996516c57dfdfaeb1a7f8f7a12c908c2e3098c4205382398e05cc7
-
SHA512
af78ef219477f5b6e0c462f351c5d89ea1986addfb7a297e8d1add9bea6676815d0711b64a38eb5bdbc6cfad6975f16f8a2a86a39a70191136f81f37c2369453
-
SSDEEP
24576:G0YO+hp5Eh3FQYad1yokTVknx99qhAjssEuGiZ43oA:G0OhQh3nad1WVi58uGimoA
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeLoadDriverPrivilege 2332 6ad4d65cfd5aa3948da347ed1418e131_JaffaCakes118.exe Token: SeLoadDriverPrivilege 2332 6ad4d65cfd5aa3948da347ed1418e131_JaffaCakes118.exe