Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
26/07/2024, 19:58
Behavioral task
behavioral1
Sample
75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
General
-
Target
75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe
-
Size
5KB
-
MD5
75802b764f0b111c0a7df77207afc5f5
-
SHA1
1c3aa4ce23f321d1c13d7ff0a9279554beaa9be7
-
SHA256
f0e9ddae5be9fc410a4c606ec6dfdfc9540fa2e82b8327f636c2da83289cb591
-
SHA512
6ab4106c0e65cf0d2c9ee7248dca2bb737fe9a79152a7d81d4dad4794d3962af44671a3b63b18df9c0937b72f7f56c4f95d45efaaaaf0ce991ad017cec8ffed1
-
SSDEEP
96:KP4Zy37UNEuWclcPg4ActhmKn9zJ+TYPZWZXH4GXbE1o:KgogNEuW+ogczJ8XREi
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2028-0-0x0000000000400000-0x0000000000407000-memory.dmp upx behavioral1/memory/2028-1-0x0000000000400000-0x0000000000407000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe 2028 75802b764f0b111c0a7df77207afc5f5_JaffaCakes118.exe