Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    02/08/2024, 05:24

General

  • Target

    8331797b78010f1d6732111327f4c6f5_JaffaCakes118.exe

  • Size

    164KB

  • MD5

    8331797b78010f1d6732111327f4c6f5

  • SHA1

    40dd35722622ab7e31e0e674c43d6599bff4ad43

  • SHA256

    371e578df4f6b5b9589c36829c3d0837f80849de8ab59f4e9c8843d32c8909aa

  • SHA512

    ef1d5f217832f962800b2d8d481267a907b9141523abe5b3d4b1b3489d840e5af957359551295e9a33eb9622850525a7fc9d2aeafe1533da3c0036fbf8dd204a

  • SSDEEP

    3072:Swks6A9PLmNc4CThF+U9qjIyFXuoL5p3h+OvgyQJBB4tiaHvsJXKDVoC0Goahwc:So6A9PLz4kFx9HyJuE/3h+kZQ/GtiakG

Score
7/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies system certificate store 2 TTPs 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8331797b78010f1d6732111327f4c6f5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8331797b78010f1d6732111327f4c6f5_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Modifies system certificate store
    PID:2304

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2304-0-0x0000000000400000-0x0000000000473000-memory.dmp

    Filesize

    460KB

  • memory/2304-1-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2304-15-0x0000000000400000-0x0000000000473000-memory.dmp

    Filesize

    460KB