Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
25/07/2024, 09:57
Static task
static1
Behavioral task
behavioral1
Sample
6f1b56302b10b1ff6259c81170466eb4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f1b56302b10b1ff6259c81170466eb4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f1b56302b10b1ff6259c81170466eb4_JaffaCakes118.exe
-
Size
77KB
-
MD5
6f1b56302b10b1ff6259c81170466eb4
-
SHA1
06803fe8a553a3ec4897a1396d2380e9cf13fd42
-
SHA256
bac407292f72019c97b290c22d3610215d2f02e43962fd61276b050086411c68
-
SHA512
c1c04519053835af6b819f4620dfc081bb6f5f395f692b397ef20959f6c66587b4febc6de5b880f1f6ba2ae0cd4086290e66ae4744ad12af10837d8df54682ee
-
SSDEEP
1536:YYzVp2Qvbw5nx6PC5cqJzVmw/XKAEbsN361JQxTe3DgPWqUHIPBPRn5CFJTOcGj:YYJp295xfnJVEbsY1JQxTGUeoPHgC
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 6f1b56302b10b1ff6259c81170466eb4_JaffaCakes118.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2528 6f1b56302b10b1ff6259c81170466eb4_JaffaCakes118.exe