Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11/08/2024, 19:08
Behavioral task
behavioral1
Sample
8b9edae9f56138a6a0e6f2f350e378af_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b9edae9f56138a6a0e6f2f350e378af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b9edae9f56138a6a0e6f2f350e378af_JaffaCakes118.exe
-
Size
2.4MB
-
MD5
8b9edae9f56138a6a0e6f2f350e378af
-
SHA1
09bcba4fd0f30c7ef340190b5ecd7e901c2ba515
-
SHA256
b08e5e9841347efa6ee3d7398917f3ea89a85d3fe555f6583e81a23ed92857e8
-
SHA512
a36a57de40bb3d972873f1bff06d8cb09ac748d7238a38effb19be105580dee0aa83faaa1ede94cb1282d476af52e1c66ea69ba2fc386ad7f5351c1c76b20688
-
SSDEEP
49152:RTd64WG9v0jwG0d1k9J3h8zKRsG2v2DLSwaNCD24gUCbt4f00JVzYq:J8GJkf3hepR2PSwag2OCW00yq
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8b9edae9f56138a6a0e6f2f350e378af_JaffaCakes118.exe