Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
13/08/2024, 21:35
Behavioral task
behavioral1
Sample
94d48f2c2b4d298b3dfbb64409da077b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
94d48f2c2b4d298b3dfbb64409da077b_JaffaCakes118.exe
-
Size
180KB
-
MD5
94d48f2c2b4d298b3dfbb64409da077b
-
SHA1
7898f639ddbd70c712e5a5b442b0346a53422f4f
-
SHA256
7de78505da593049e8bc1a41e44e9c6b8dad0daf5f66967943054783cb00d006
-
SHA512
090daa309f7d7ba4548a9c9208e865de2e6ff9abc638b3e106d11c6e65ac15599c9c3d356aa788f254a06adc53f801a206a909a47a360905d847bc994d80b3a8
-
SSDEEP
3072:eUQevADClxmlU+oFc9uHVZWvtLoB+ObIIW8HtXzlYHyQYzZDWA7EWzMXlTE3xU9d:eU7IDy8qXxv9HFB48VVc62u2B620EnB
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2988-0-0x0000000000400000-0x000000000042F000-memory.dmp upx behavioral1/memory/2988-1-0x0000000000400000-0x000000000042F000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 94d48f2c2b4d298b3dfbb64409da077b_JaffaCakes118.exe