Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
10/08/2024, 07:36
Behavioral task
behavioral1
Sample
854a51015fcd340a3b405e0d926e77b0_JaffaCakes118.exe
Resource
win7-20240708-en
2 signatures
150 seconds
General
-
Target
854a51015fcd340a3b405e0d926e77b0_JaffaCakes118.exe
-
Size
62KB
-
MD5
854a51015fcd340a3b405e0d926e77b0
-
SHA1
801d292bf71635646885f9b395e98089153c39c1
-
SHA256
23964077eebdc9f6aebfba5c42a936367a1d66db57430bc1db15e26f97f0522c
-
SHA512
0fe24927163234edfaeed845802447e8c8b453b84a8f9fbfe9314e0cdc71ce67f929d0fc2c5173be1e425c7aa1580a2f6808c2162fc009cc3ba489bc89f84469
-
SSDEEP
1536:IBCM9iBJBH5/q1xNWJrkufFFQ8fiknouy8YEY5qXXN:seBJBU1xYJTQ8fvoutYLIXXN
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3648-0-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral2/memory/3648-1-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral2/memory/3648-3-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral2/memory/3648-11-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral2/memory/3648-12-0x0000000000400000-0x000000000042C000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 854a51015fcd340a3b405e0d926e77b0_JaffaCakes118.exe