Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
51s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20/06/2024, 06:24
Static task
static1
Behavioral task
behavioral1
Sample
039ba194cdbdde9dd26bf222128953eb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
039ba194cdbdde9dd26bf222128953eb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
039ba194cdbdde9dd26bf222128953eb_JaffaCakes118.exe
-
Size
14KB
-
MD5
039ba194cdbdde9dd26bf222128953eb
-
SHA1
720f6fefaa3e9f89f22164e5950327b17c409a59
-
SHA256
7c7923b7887e92ce2e74e7f79d592c5317683aceee9fac2a346bb5d28db4e334
-
SHA512
147efe68d7e3f170b5c03860ba3eb3648c4b2913f604ac2fd090f180b8f26fbd66c460f9fa00595066207ee42fef539e2c1fa0d4889ebeaf5f300eb73335b448
-
SSDEEP
384:HnkOanR5CB3Eomb8ZeE4G4N4d4gHDxauH0ML4lkN5zIafWh0C9T2:HnkOanRE3EotZeENKKnHDxauHBL4GIai
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Windows Media Center = "C:\\Windows\\smss.exe" 039ba194cdbdde9dd26bf222128953eb_JaffaCakes118.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\smss.exe 039ba194cdbdde9dd26bf222128953eb_JaffaCakes118.exe File opened for modification C:\Windows\smss.exe 039ba194cdbdde9dd26bf222128953eb_JaffaCakes118.exe