Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
11/07/2024, 10:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
38adbe278b8521a9083f2be71b318ef6_JaffaCakes118.exe
Resource
win7-20240705-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
38adbe278b8521a9083f2be71b318ef6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
0 signatures
150 seconds
General
-
Target
38adbe278b8521a9083f2be71b318ef6_JaffaCakes118.exe
-
Size
40KB
-
MD5
38adbe278b8521a9083f2be71b318ef6
-
SHA1
69524ce81fad0e8a61e64e2038711d87dd591e3a
-
SHA256
e778972af38090cd8e83a96c852e3954080e544d3b7632c7069586617e23a474
-
SHA512
59a6d9a413509f2aec2a0661333605a44d640e4fa003b93ec1e9cebfee16e830db81a841af68ce7d9e34f73cc4a23488a1106c68148a5007c1883824368ef703
-
SSDEEP
768:LN7gyR175Za+eYIwjR/k7pVbP+9UsO4vl:LZ595LPIwj1k7DL+lPl
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\malware_reg_mod = "C:\\WINDOWS\\SYSTEM32\\auto_reg_mod.bat" 38adbe278b8521a9083f2be71b318ef6_JaffaCakes118.exe -
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\WINDOWS\SysWOW64\auto_reg_mod.bat 38adbe278b8521a9083f2be71b318ef6_JaffaCakes118.exe