Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system -
submitted
02/08/2024, 05:24
Behavioral task
behavioral1
Sample
8331797b78010f1d6732111327f4c6f5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8331797b78010f1d6732111327f4c6f5_JaffaCakes118.exe
-
Size
164KB
-
MD5
8331797b78010f1d6732111327f4c6f5
-
SHA1
40dd35722622ab7e31e0e674c43d6599bff4ad43
-
SHA256
371e578df4f6b5b9589c36829c3d0837f80849de8ab59f4e9c8843d32c8909aa
-
SHA512
ef1d5f217832f962800b2d8d481267a907b9141523abe5b3d4b1b3489d840e5af957359551295e9a33eb9622850525a7fc9d2aeafe1533da3c0036fbf8dd204a
-
SSDEEP
3072:Swks6A9PLmNc4CThF+U9qjIyFXuoL5p3h+OvgyQJBB4tiaHvsJXKDVoC0Goahwc:So6A9PLz4kFx9HyJuE/3h+kZQ/GtiakG
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5052-0-0x0000000000400000-0x0000000000473000-memory.dmp upx behavioral2/memory/5052-10-0x0000000000400000-0x0000000000473000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8331797b78010f1d6732111327f4c6f5_JaffaCakes118.exe