Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    13/08/2024, 21:35

General

  • Target

    94d48f2c2b4d298b3dfbb64409da077b_JaffaCakes118.exe

  • Size

    180KB

  • MD5

    94d48f2c2b4d298b3dfbb64409da077b

  • SHA1

    7898f639ddbd70c712e5a5b442b0346a53422f4f

  • SHA256

    7de78505da593049e8bc1a41e44e9c6b8dad0daf5f66967943054783cb00d006

  • SHA512

    090daa309f7d7ba4548a9c9208e865de2e6ff9abc638b3e106d11c6e65ac15599c9c3d356aa788f254a06adc53f801a206a909a47a360905d847bc994d80b3a8

  • SSDEEP

    3072:eUQevADClxmlU+oFc9uHVZWvtLoB+ObIIW8HtXzlYHyQYzZDWA7EWzMXlTE3xU9d:eU7IDy8qXxv9HFB48VVc62u2B620EnB

Score
7/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\94d48f2c2b4d298b3dfbb64409da077b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\94d48f2c2b4d298b3dfbb64409da077b_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2988-0-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/2988-1-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB