Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
11/07/2024, 00:55
Behavioral task
behavioral1
Sample
3718dd6afb127356499d981f5499000f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3718dd6afb127356499d981f5499000f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3718dd6afb127356499d981f5499000f_JaffaCakes118.exe
-
Size
83KB
-
MD5
3718dd6afb127356499d981f5499000f
-
SHA1
576b3e70a6f9e219545f692632a55ba572f9a788
-
SHA256
c997603dfcd9c2400cb3d2aeb64784c4005a66a953b57224b41fe84ebad0eb88
-
SHA512
f1e3830677823d89429cc0c5c3ae9c9659974367b58887cadf66defcb4ba8a3b3a9692a215275e48135f86460c2fd41aae9da8a3bc37917068350544a2b584d5
-
SSDEEP
1536:/g7CrtriERRHSrkrBEmLID3mLKaMPqCe/UjsBgdtOu1ZSpNxzXNV05jkV1F:/g7CrZiELi426nLKoKsBdu1sTXNwjC1F
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2876-0-0x0000000000400000-0x0000000000422000-memory.dmp upx behavioral1/memory/2876-1-0x0000000000400000-0x0000000000422000-memory.dmp upx -
Modifies registry class 7 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID 3718dd6afb127356499d981f5499000f_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} 3718dd6afb127356499d981f5499000f_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\dttqz\\command 3718dd6afb127356499d981f5499000f_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node 3718dd6afb127356499d981f5499000f_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\dttqz 3718dd6afb127356499d981f5499000f_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\dttqz 3718dd6afb127356499d981f5499000f_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell 3718dd6afb127356499d981f5499000f_JaffaCakes118.exe