Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
131s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
23/08/2024, 20:45
Static task
static1
Behavioral task
behavioral1
Sample
bd16d4048313ae814fea9e34574a0659_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd16d4048313ae814fea9e34574a0659_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd16d4048313ae814fea9e34574a0659_JaffaCakes118.exe
-
Size
252KB
-
MD5
bd16d4048313ae814fea9e34574a0659
-
SHA1
90f9b7386cda7816015f6b7f7c110ce65f3a07fc
-
SHA256
b2a4efff5a016450c0c4d3981475c7d0c002a01e1360a6b4ff5e080bbf92893e
-
SHA512
961ca60358a363b6317bd98a4ef130ea06dea34387a3e386b3065e7706330bd41c89bcc3afab10f6a28093c8b4e9c38fd6ad73621ee89e99165b10867923a9d3
-
SSDEEP
3072:QWPiFuCW3ZyTc/SLeT3cKJeuYYhGlobTx3qTveKweTPNa05FUh1TJVPxMghKvCN9:QidCW3hlTMo3MTveK5RATPJhK+
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bd16d4048313ae814fea9e34574a0659_JaffaCakes118.exe