Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
20/06/2024, 12:18
Static task
static1
Behavioral task
behavioral1
Sample
05e9e59688da8e7ffbe83e58c85a9a5f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
05e9e59688da8e7ffbe83e58c85a9a5f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
05e9e59688da8e7ffbe83e58c85a9a5f_JaffaCakes118.exe
-
Size
235KB
-
MD5
05e9e59688da8e7ffbe83e58c85a9a5f
-
SHA1
94c950be1f4f609c6f0deb1936c430d83696c9aa
-
SHA256
1346cd67baa5a5409b21519f0f2d31b1541cc69b911633eaaba123f1b7299a27
-
SHA512
dfb298c36d035bfe483ddd87822ffec1a40d93f2679c37c7c02ed54942fdebe1f7d7ce97635ba697bfa12c19280f531d6565c6f2afc890403148cbb3138e1073
-
SSDEEP
6144:VRiaDutpCkGinKtPHn677ATWNdNJC94FyZs:uUutpCkGinCPH6fAsCwyZs
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2556 05e9e59688da8e7ffbe83e58c85a9a5f_JaffaCakes118.exe 2556 05e9e59688da8e7ffbe83e58c85a9a5f_JaffaCakes118.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2556 05e9e59688da8e7ffbe83e58c85a9a5f_JaffaCakes118.exe