Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
23/08/2024, 22:41
Static task
static1
Behavioral task
behavioral1
Sample
bd73401d456dc43dd7ae531c01f51be7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd73401d456dc43dd7ae531c01f51be7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd73401d456dc43dd7ae531c01f51be7_JaffaCakes118.exe
-
Size
88KB
-
MD5
bd73401d456dc43dd7ae531c01f51be7
-
SHA1
ab12c82619f3b27969d65086ca2b480141bf139e
-
SHA256
3380e5df63329ce25bad618aece6f0e9a07c55992356287605d367894e7bb1ce
-
SHA512
d08325a20626b898675db82eb8d4b7df6fd3f85a158531dfb04aed6a168416dc6754d06a9fff3d140b031da057c7aed7f9762636803fb11d97eed992183b4a26
-
SSDEEP
1536:RJGyWqs3mz6tSmDZGfFHeCH8899flpkPI/Qvojm/B9osUzsRD5leVek:RJd3s3aCSmDZ8FHN842cQT7Jdi
Malware Config
Signatures
-
Suspicious behavior: RenamesItself 1 IoCs
pid Process 3000 bd73401d456dc43dd7ae531c01f51be7_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeLoadDriverPrivilege 3000 bd73401d456dc43dd7ae531c01f51be7_JaffaCakes118.exe