Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system -
submitted
01/08/2024, 22:27
Behavioral task
behavioral1
Sample
81fa2ebb98614fdbd3b4b161900651b4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
81fa2ebb98614fdbd3b4b161900651b4_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
81fa2ebb98614fdbd3b4b161900651b4
-
SHA1
20841db1c7b5b650218dce08ac034de50a297565
-
SHA256
35783db5e13fe7dd9cd4d7cfeaa604df72dd5929a4e4feecfd7e4817a480d23c
-
SHA512
631faed0500eb20216df3e86275e6dfb0dbbc66fd69ccf7bbe810e64cb4554d0dc55b6ebb52fcac4f3d38a368a3a1a84e55926c89e67e1738088592d79acd70d
-
SSDEEP
24576:zpODPV03TPMif33I7pbOGqfzKjvWxANIAUuqjOe8uGZBrlgT8fhJ9B49qdAdCF0Y:zQDPDQHCZqGvWxAN8uqjfTerli8fhfB1
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4948-0-0x0000000000400000-0x00000000005CD000-memory.dmp upx behavioral2/memory/4948-2-0x0000000000400000-0x00000000005CD000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 81fa2ebb98614fdbd3b4b161900651b4_JaffaCakes118.exe