Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 05:21

General

  • Target

    6d73bff954ee5ba686038503349c3771_JaffaCakes118.exe

  • Size

    370KB

  • MD5

    6d73bff954ee5ba686038503349c3771

  • SHA1

    cbcf67fb9aa324d6bb19debd6e44487343e8b72e

  • SHA256

    404aff3979c91bf5eb62fc89b779fc42a71ef8f64dcd420786a7d2c7ada4d0db

  • SHA512

    f6ec511c25c4efdab51783a9f220fba36d1be6a9f2c05ac2e59700ac15059fe3c1a139d4b1fd080b6815002b1e081f66668731159d523f9a115c4f0fb6f8999b

  • SSDEEP

    6144:mxtSEwC6NXRITqGmUROlsN5CctPt5/dZ90Jfk9NuyqLJtMy2AFrfDW2lqhrz9ZQ7:ePra+WG6loCaPt5/dwJvRAd9+7

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\6d73bff954ee5ba686038503349c3771_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6d73bff954ee5ba686038503349c3771_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \ProgramData\{3274fdb1-2802-92da-3274-4fdb1280f6c4}\6d73bff954ee5ba686038503349c3771_JaffaCakes118.exe

    Filesize

    370KB

    MD5

    6d73bff954ee5ba686038503349c3771

    SHA1

    cbcf67fb9aa324d6bb19debd6e44487343e8b72e

    SHA256

    404aff3979c91bf5eb62fc89b779fc42a71ef8f64dcd420786a7d2c7ada4d0db

    SHA512

    f6ec511c25c4efdab51783a9f220fba36d1be6a9f2c05ac2e59700ac15059fe3c1a139d4b1fd080b6815002b1e081f66668731159d523f9a115c4f0fb6f8999b

  • memory/836-8-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/836-26-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/836-19-0x0000000000300000-0x000000000032C000-memory.dmp

    Filesize

    176KB

  • memory/836-18-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/836-7-0x0000000000200000-0x0000000000201000-memory.dmp

    Filesize

    4KB

  • memory/836-16-0x00000000002E0000-0x00000000002E1000-memory.dmp

    Filesize

    4KB

  • memory/836-15-0x00000000002D0000-0x00000000002D1000-memory.dmp

    Filesize

    4KB

  • memory/836-14-0x00000000002C0000-0x00000000002C1000-memory.dmp

    Filesize

    4KB

  • memory/836-13-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/836-12-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/836-11-0x0000000000250000-0x0000000000251000-memory.dmp

    Filesize

    4KB

  • memory/836-10-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/836-2-0x0000000000080000-0x0000000000081000-memory.dmp

    Filesize

    4KB

  • memory/836-9-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/836-17-0x0000000000210000-0x0000000000212000-memory.dmp

    Filesize

    8KB

  • memory/836-6-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/836-5-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/836-4-0x0000000000170000-0x0000000000171000-memory.dmp

    Filesize

    4KB

  • memory/836-3-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/836-30-0x00000000008E0000-0x00000000008E1000-memory.dmp

    Filesize

    4KB

  • memory/836-29-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/836-28-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/836-27-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/836-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/836-25-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/836-24-0x00000000008D0000-0x00000000008D1000-memory.dmp

    Filesize

    4KB

  • memory/836-23-0x0000000000350000-0x0000000000351000-memory.dmp

    Filesize

    4KB

  • memory/836-1-0x0000000000030000-0x0000000000032000-memory.dmp

    Filesize

    8KB