Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
19/07/2024, 22:35
General
-
Target
5df64a1b0740615fb2fd4c82bfa5cf31_JaffaCakes118.exe
-
Size
2.0MB
-
MD5
5df64a1b0740615fb2fd4c82bfa5cf31
-
SHA1
6c22392e86deaa7531a33efcbc2c1cbfc443964f
-
SHA256
ac1377451f815fa407b6390e7274c264f02371fc447035a5e49738b065352196
-
SHA512
b4a64b081a6789270cd6b1a79a4a877d7e88967ca7dcc34cfb1e5d2bd7eccd9f37904ee106945bb137245da9a008ca26d20022fdc5a7ed0860740b542dd1225e
-
SSDEEP
49152:V22NQT3PTx2357g94emWg5m4k4wGP/6TV1JkPujK0:VZNqNi7KfmWg5lXX6ZPkPul
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 25 IoCs
Detects Themida, an advanced Windows software protection system.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5df64a1b0740615fb2fd4c82bfa5cf31_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5df64a1b0740615fb2fd4c82bfa5cf31_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
2.6MB
-
Filesize
992KB
-
Filesize
208KB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
4KB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
2.6MB